Root Causes
Regulators and prosecutors expect firms to identify the underlying causes of misconduct and risk governance failures, not just proximate triggers. Culture is viewed as a key factor, driving behavior and shaping the efficacy of control environments, with firms expected to demonstrate how weaknesses are identified and addressed to mitigate future risk.