Every growing company eventually builds a compliance program: policies that outline expectations, employee training programs, and a way for people to report concerns. At that point, leaders often feel like they’ve addressed compliance risk.
And this is a significant milestone—but what comes next is the real work.
Getting those elements in place matters, but so does making them function day-to-day. The system can be exactly right on paper and still fall short if employees don’t trust how it will work in practice.
Employees Learn From What They See
Employees don’t rely solely on policies to understand expectations. Instead, they note carefully what happens around them every day.
Step back from compliance-specific topics like harassment or conflicts of interest for a moment. Instead, ask yourself: Does the business have common standards? Or is there one set of rules for high-performers (or another group) and one set for everyone else?
Similarly, does the company have a culture that welcomes concerns? If someone in a junior role raised a good-faith objection or pointed out a perceived failing, what kind of response would they get? Would their input be taken seriously and evaluated objectively? Or would they be told to mind their own business, get back to work, stop rocking the boat?
Over time, your team puts together a clear picture of how the business actually operates. That picture, more than any written policy, influences how employees will interpret the compliance messages you send.
And their judgments can form quickly. Employees don’t need repeated examples. A handful of inconsistent decisions or one situation that feels mishandled can shape how they view the entire system going forward.
Growth Makes Trust Harder
Growth makes compliance programs necessary. Ironically, it can also make compliance harder in practice, not easier.
In a smaller company, employees often share the same context. They know how decisions are made, hear how issues are handled, and develop a working sense of what the company will actually do. As organizations expand, they lose some of the informal clarity that once made standards feel visible, consistent, and believable.
Fast-growing companies are also under pressure to hire quickly, drive revenue, and move fast on many fronts. More teams, more managers, and more competing priorities create more variation in leadership decisions. Different parts of the company begin to develop different norms, pressures, and assumptions.
As organizations grow, they often get better at articulating standards before they get equally good at reinforcing them. The company says more clearly what should happen, while employees are still watching whether it actually does. The challenge is no longer just creating standards. It is making them feel credible across a larger, more complex organization.
Speaking Up Feels Risky—Even in Ethical Companies
Even when employees recognize that something isn’t right, the decision to speak up is rarely straightforward.
Raising a concern introduces uncertainty. How will it be received? Will it be taken seriously? Will anything actually change? Even if I’m right, could it affect how I’m seen—or what happens to me next?
Employees don’t need to believe the system is broken to avoid using it. They just need to believe the outcome is unpredictable. If they aren’t confident the issue will be handled consistently—or that raising it won’t create complications for them—the safer choice is often to stay quiet.
Gallup’s workplace research reflects the same pattern: when employees don’t trust how decisions will play out, they disengage and hold back.
This is especially true in smaller or growing businesses, where roles are closer, and outcomes feel more immediate. Raising a concern can feel personal, not procedural. And when speaking up feels like a personal risk rather than a professional responsibility, even well-intentioned employees will hesitate.
That hesitation is what keeps issues from surfacing early. Not a lack of awareness, but a lack of confidence.
Trust Matters
Trust has direct operational consequences, which is why long-running studies like Edelman’s Trust Barometer continue to track it across institutions.
In a compliance context, it influences whether issues surface early, when they can still be addressed, or stay hidden until they become more serious.
Most problems do not begin as major violations. They start as situations that could have been resolved earlier: a concern about a manager’s behavior, an interpersonal issue handled inconsistently, or a questionable practice allowed to continue. When raised and addressed early, they are easier to contain. When employees stay silent, they compound.
By the time a problem surfaces through a complaint, legal claim, or public exposure, leaders have fewer options and far less control over the outcome.
What makes this difficult to manage is that the decision to speak up or not is often invisible. When trust is low, that silence can last longer than leaders realize.
What Makes Speaking Up Feel Worth It
Leaders looking to improve the effectiveness of their compliance programs are often tempted to add more: more training, more communication, more documentation.
But volume is usually not the issue. Employees do not need more information. They need more confidence in what will happen if they speak up.
In practice, that confidence comes from a few things:
- Addressing concerns in a timely way
- Applying rules and standards consistently across the business
- A process that works and is perceived as fair and objective
- Regular encouragement to speak up—paired with a commitment to protect those who do
This is less about the formal process than about the patterns employees observe over time and hear about from others. When they see that reports are truly welcome, that they get a fair and objective hearing, and that they don’t face career penalties for bringing issues forward, speaking up feels both more reasonable and less risky.
Trust Determines Whether Compliance Works
A compliance program is designed to educate employees on what’s expected and to surface issues early, when they can still be addressed.
Every compliance program is ultimately tested in the same way: in a real situation, under real pressure, when an employee tries to decide whether to speak up or stay quiet.
This is why a compliance program cannot be judged only by whether it exists. In a growing company, formal structures are necessary. But leaders also need to pay attention to the informal culture messages that build—or erode—the trust that makes those structures work.
A program can be right on paper and still fall short if employees are not confident in how it will work in practice. That is the real work for leaders: not just building the system, but making it credible across a larger, more complex organization—so employees will use it when it matters most.
Kirsten Liston is the Founder and CEO of Rethink Compliance, an Inc. 5000 company that works with leading global organizations to drive behavior change through compliance and ethics programs. She has over two decades of experience advising Fortune 500 and Global 2000 companies on reducing compliance and reputational risk.
