Enterprise Ethics,

Compliance, and
Governance
Uneffective ethics programs

• When all too often the code of conduct is signed, filed away,
then forgotten. This does not constitute an effective ethics
program for an enterprise.

Effective ethics programs

• An effective ethics program for an enterprise starts with

understanding the risk environment and then requires an
effective code of conduct.
• While the emphasis may be a bit different at various levels,
everyone should be aware of the enterprise’s values and
overall mission.
How to evaluate and recommend effective internal accounting controls?

Summarizing Ethics
Understanding The Survey Results:
Developing A Mission
Ethics Risk
Statement Do We Have a
Environment
Problem?
DEVELOPING MISSION STATEMENTS
internal audit can help to evaluate mission statements or rewrite and launch new ones

If employees or other stakeholders are not aware

of the corporate mission statement, there is a
need to revisit and revise that document.

If the enterprise has no mission or values statement, internal audit

should recommend assembling a team to develop a statement
that reflects the enterprise’s overall values and purposes

If an existing statement was met with

cynicism during the ethics survey, it
is time to rework and revise it.
Understanding the Ethics Risk Environment
Internal audit can take a major lead here in surveying employee attitudes and practices.
Ethics attitudes and risks can be assessed through :

1.Reviews of findings from past audits or

special reviews based on employee
stakeholder
1.Ethics attitude surveys
Summarizing Ethics Survey Results:
Do We Have a Problem?