What ultimately determines whether a compliance programme succeeds or fails?
Most professionals would point to effective controls, robust governance, adequate resources, regulatory expertise, or technological sophistication. All of these are important. They also share a common characteristic: they can be designed, implemented, measured, and improved through structured processes.
Yet organizations with similar policies, comparable controls, and access to the same regulatory guidance often achieve remarkably different outcomes.
The difference often lies not in what organizations have, but in who they are.
The answer, more often than not, is culture.
In the fields of anti-money laundering, sanctions compliance, and financial crime prevention, culture has become one of the most frequently discussed concepts and perhaps one of the least understood. Regulators encourage it, boards discuss it, and organizations invest significant resources in strengthening it. Yet there is often