Obligations and promises Over the last year in our Elevate Compliance Huddles, we have walked through Operational compliance is the work between the obligation and the promise. It is where promises are kept, obligations are fulfilled, and evidence of compliance is produced. It proceeds without the management, compliance, safety, and other principles we apply to the rest of Founder, Principal Consultant Lean Compliance Consulting, Inc.

Four years ago I wrote about bounded-set and centred-set compliance. I have been applying that distinction to compliance ever since. Bounded-set Versus Centred-set Compliance Keeping you on-mission, between the lines, and ahead of risk

risk measures needed to protect the value stream activities needed to meet compliance objectives preventive Compliance is considered as necessary, but a waste from a LEAN perspective. However, compliance programs serve the value chain by mitigating the effects of epistemic (i.e. reducible The following chart contains translations for other LEAN objectives as applied to the compliance domain Compliance processes will still contain traditional sources of "waste."

Minimal Viable Compliance / Performance Outcomes are the effects of capabilities which means that if You may find your compliance systems do not have the capabilities you need to achieve and then to maintain artifacts that demonstrate conformance to requirements Measures of performance - abilities to meet compliance objectives Measures of effectiveness - progress against compliance outcomes towards zero: non-conformance However, the purpose of the compliance function goes further to ensure that safety, quality, environmental

Why This Matters for Compliance In a previous post — Compliance and the Problem of Evil — I argued that every compliance failure is an absence: the privation of a good that ought to be present. Without both declarations, the concepts of defect, failure, and non-compliance have no anchor. This is the bridge between engineering and compliance. The engineer designs the good — the identity *and* the necessary variation — and compliance is the discipline

power organizations towards total value from their GRC, ESG, Quality, Security, Regulatory, Ethics, and compliance together as one, obligations can be met and stakeholders will experience the benefits from being in compliance : improved quality, safety, environment, security, sustainability, and so on – the real power of compliance

“We already have a GRC framework,” compliance leaders would say, walking right past our not-so-secret It was hidden (not intentionally) from those who still looked through the lens of Procedural Compliance The Easter Egg - Now Revealed The Lean Compliance Easter Egg The way our program elevates GRC is by ensure they work together as one to achieve targeted compliance outcomes. Will your organization be the next to experience the Lean Compliance Easter Egg ?

Environment-First Future Those that have been following us will know that compliance needs to be more This is true for all compliance domains including environmental obligations. In recent years I have written about how the compliance landscape has changed and that it needs to more Compliance as a category of programs is more akin to quality which has control and assurance functions Environmental compliance is moving beyond simply monitoring and reporting towards establishing programs

- professionals who understand both operational efficiency and managed compliance. The Solution: Lean & Compliance Expertise Here's where I see a massive opportunity: bringing together Lean methodology and compliance expertise. Are risk and compliance experts involved? How are you evaluating control removal decisions? Engage the Right Expertise Bring in risk & compliance specialists Document control rationales Create

Elevating Compliance Community of Practice The purpose of this initiative is to bring together compliance Unless compliance learns to work together within and across silos it will never fulfill its purpose to Compliance started off with meeting prescriptive, regulatory requirements. Compliance needs to change and for the better. And this initiative will help with that. Founder, Chief Compliance Engineer Lean Compliance The Operational Compliance Experts

Are your risk and compliance controls capable to keep you between lines? The purpose of risk and compliance is to keep companies operating between the lines so that they do not When it comes to risk and compliance objectives measuring outputs using a feedback-management-control

updates, performance monitoring as systems drift, bias detection and correction as they adapt, and compliance Organizations using static approaches face unknown compliance gaps that multiply as their systems learn and evolve, while engineered design provides verifiable compliance and defensible audit trails. Organizations that continue applying familiar IT methods to AI will create operational risks, compliance He is the founder of Lean Compliance and co-founder of ProfessionalEngineers.AI , organizations dedicated