The compliance program as an internal control

Do compliance programs make a difference? Post-mortem reviews of compliance failures typically raise the question as to whether the cause of the failure is due to a rogue bad actor or a failure in controls. It may be both; a lack of compliance controls allowed or even enabled the rogue ...