The question may sound sarcastic, even absurd, but the consequences of senior leaders' poor judgment are very real.
Recent events involving high-profile corporate leaders have reignited a difficult debate: when a leader's personal conduct creates reputational, governance, security, or conflict-of-interest risks, does it remain purely private?
Of course, I'm not calling for organizations to conduct "spousal faithfulness audits."
However, companies may need to think more seriously about something broader:
Judgment audits.
When leaders occupy positions of enormous influence, their personal decisions can have corporate consequences.
Things boards should do include:
• Maintain a robust code of conduct that applies equally to senior executives and the CEO.
• Define expectations regarding conflicts of interest, workplace relationships, harassment, use of company resources, social media activity, and disclosure obligations.•
• Treat executive misconduct and conflicts of interest as part of the organization's risk framework.
• Require annual and event-driven disclosures of outside relationships, business interests, gifts, and potential conflicts.
• Governance frameworks emphasize the board's role in overseeing risk culture and senior management.
• Create procedures for investigating allegations involving senior leaders.
• Develop crisis-communication and succession plans before a problem emerges.
What Internal Auditors Can Do:
1. Audit governance and ethics programs. Internal audit should evaluate whether governance processes:
- Promote appropriate ethics and values.
- Support accountability.
- Communicate risk information effectively.
2. Assess conduct-risk controls. Review whether:
- Conflict-of-interest disclosures are complete and updated.
- Executive expense, travel, procurement, hiring, and vendor decisions are subject to appropriate controls.
- Exceptions or overrides by executives are tracked and reviewed.
3. Examine indicators of misconduct risk. Internal audit can evaluate:
- Whistleblower hotline trends.
- HR investigations.
- Employee-relations cases.
- Unusual compensation, promotion, procurement, or contract decisions.
- Concentrations of authority that may enable inappropriate behavior.
4. Evaluate board reporting: Determine whether significant conduct and reputation risks are escalated promptly and transparently to the board and relevant committees.
5. Perform culture and behavioral audits. The Institute of Internal Auditors has emphasized organizational behavior and governance as important assurance areas, recognizing that behaviors and culture can create significant risk exposures.
The issue is not morality policing.
The issue is risk management.
Culture audits traditionally examine ethics, speak-up culture, accountability, and leadership behavior. Perhaps the next evolution is not scrutinizing marriages, but evaluating whether executives consistently demonstrate the judgment, integrity, and self-discipline expected of corporate stewards.
A leader's private life should remain private until it creates public risk.
The real question is:
Where should boards draw that line?
#CorporateGovernance #Leadership #RiskManagement #Ethics #BoardGovernance #CorporateCulture #ExecutiveLeadership #InternalAudit #internalaudit #auditommittee #risk #grc #ethics
