Firms spend millions of dollars annually on whistle-blower hotlines, training, and other efforts to ensure adherence to laws, regulations, and company policies. Yet malfeasance remains entrenched in the corporate world. Why? Too many firms treat compliance as a box-checking exercise, making employees sit through training and attest that they understand the rules, but failing to assess the effectiveness of their compliance programs, or doing so with faulty metrics. The authors explain how we r...