Tone at the top is necessary. It has never been sufficient.
The phrase has been part of corporate governance language for decades. Every compliance framework references it. Every board presentation invokes it. Every integrity survey includes it as a variable. Tone at the top — the visible, unambiguous commitment of senior leadership to ethical conduct — is, by consensus, one of the most important drivers of compliance culture.
This consensus is correct. Organisations whose leaders consistently model the behaviour they ask of others, who make decisions that prioritise integrity even at commercial cost, and who create the conditions in which people feel safe to do right — these organisations build something that policy documents and monitoring systems alone cannot replicate.
But the phrase has also become something that compliance culture can hide behind. A CEO endorsement in the annual report. A leadership message at the start of the training module. A values statement on the wall of the reception area. These things are not nothing. They are also not enough — and the gap between the two is where compliance programmes most commonly fail to achieve what they are designed to achieve.
Tone is behaviour, not communication.
The most consequential thing a senior leader does for compliance culture is not what they say. It is what they do when it costs them something. When a significant commercial opportunity is declined because the counterparty cannot pass due diligence. When a high-performing leader is held accountable for the manner in which they achieved their results, not only the results themselves. When a concern raised through the speak-up channel is visibly followed up, and the person who raised it is seen to have been protected.
These moments are rare. They are also disproportionately powerful. Organisations are acutely attentive to what happens at the boundary between stated values and commercial reality — and the conclusions they draw from those moments shape the decisions of hundreds of people who were not in the room when the decision was made.
This is why tone at the top cannot be a communications exercise. It requires leaders who understand that their behaviour under pressure is the compliance programme's most important input — and who are prepared, and equipped, to act accordingly when the moment arrives.
Ask yourself: in the past twelve months, can you name a specific decision made by a senior leader in your organisation that demonstrated, at real cost, that integrity takes precedence over commercial convenience? If the answer requires thought, or involves qualifying language, the tone your organisation is actually setting may be different from the tone it believes it is setting.
What leaders do between the set pieces matters most.
Compliance culture is not formed by annual integrity campaigns or board-level endorsements. It is formed in the thousands of ordinary interactions that happen between senior leaders and the people around them — in meetings, in performance reviews, in the way difficult conversations are handled, in what gets praised and what gets ignored.
A senior leader who expresses strong support for compliance in formal settings but whose behaviour in operational meetings signals that results matter more than process is not setting a tone at the top. They are demonstrating, through the accumulated weight of daily behaviour, that the formal commitment is performative — and the organisation will read that signal clearly.
Conversely, a senior leader who treats integrity as a consistent operating principle — who asks about how results are being achieved and not only what results are being achieved, who creates space for difficult conversations, who responds to concerns with curiosity rather than defensiveness — is building a culture that sustains itself over time, through turnover and through commercial pressure, because it is embedded in how the organisation works rather than dependent on the presence of any individual.
Tone at the top remains the right place to start. The work of compliance culture requires it to be more than a starting point.
This article reflects the compliance advisory perspective of Compliance House and is intended for informational purposes. It does not constitute legal advice. Organisations seeking guidance on specific obligations should consult qualified counsel in the relevant jurisdiction.
Download this article
Save a PDF copy for offline reading, or share it with a colleague who might find it useful.