Compliance is often defined through rules, regulation, and control frameworks.

The challenge is not the absence of rules. It is how those rules are interpreted and applied in practice.

In this RiskMasters bonus episode, Jennifer Geary and Natalie McManus explore the difference between rules-based compliance and principles-based compliance, and why starting with harm leads to better decisions.

The discussion focuses on a shift in sequence.

Compliance processes typically begin with the question: what does the rule require.

In practice, decisions are shaped earlier, when potential outcomes and risks are considered.

Starting with harm changes how compliance operates.

It requires organisations to consider impact before interpretation, and to apply rules in context rather than in isolation.

This creates a shift in how compliance decisions are made:

• decisions are anchored in potential harm rather than rule interpretation
• rules are applied in context rather than followed mechanically
• judgement is exercised earlier in the decision process
• supervision is balanced with trust and capability
• compliance supports outcomes as well as adherence

The extract also highlights the role of supervision.

Organisations can increase control through oversight, automation, and monitoring.

This reduces the risk of error. It also increases cost and can reduce flexibility.

Alternatively, organisations can invest in judgement, enabling individuals to act as their own control.

The balance between supervision and autonomy becomes a risk decision.

For organisations, this changes how compliance supports governance and risk management.

Compliance is not only about meeting regulatory requirements. It is about how those requirements are interpreted, prioritised, and embedded in decision-making.

This includes how harm is identified, how rules are applied in context, and how judgement is developed across the organisation.

Strengthening these capabilities improves how organisations manage compliance risk, support decision-making, and align outcomes with regulatory intent.

This extract is taken from the RiskMasters episode with Jennifer Geary and Natalie McManus, discussing principles-based compliance, decision-making, and the role of the Chief Compliance Officer.

Compliance frameworks typically include risk assessment, monitoring, reporting, governance, and policy.

The challenge is not the absence of these components. It is how they connect in practice.

In this RiskMasters bonus episode, Natalie McManus explains the IMPACT Wheel and how it reframes compliance as a continuous system aligned to the risk management lifecycle.

The discussion focuses on how compliance moves from periodic activity to real-time decision support.

Risk assessment is often treated as an annual or cyclical exercise. In practice, it occurs continuously, whenever new information, regulatory change, or operational risk emerges.

The IMPACT Wheel connects risk identification, measurement, action, monitoring, and correction into a single integrated process.

This creates a shift in how compliance operates:

• risk assessment becomes continuous and real-time
• monitoring reflects current conditions, not predefined plans
• actions are taken based on live information
• issues are surfaced through multiple channels
• insight feeds back into decision-making

The model is designed to be flexible and organisation-agnostic.

It allows compliance, audit, and control functions to operate as a connected system rather than separate activities.

Simplicity is a core principle. Clear models are easier to apply, easier to scale, and more likely to influence behaviour.

For organisations, this changes how compliance supports governance and risk management.

It shifts compliance from a structured framework to an integrated capability embedded in decision-making.

This includes how risk is assessed in context, how monitoring adapts to change, and how information flows across the organisation.

This extract is taken from the RiskMasters episode with Jennifer Geary and Natalie McManus, discussing the IMPACT Wheel, compliance frameworks, and the integration of compliance into the risk management lifecycle.

The Chief Compliance Officer role is often defined through technical expertise, regulatory knowledge, and control frameworks.

In practice, the effectiveness of compliance leadership depends on something broader.

In this RiskMasters extract, Jennifer Geary and Natalie McManus explore how the capabilities required for high-performing Chief Compliance Officers are evolving in response to increasing complexity, data availability, and organisational pressure.

The discussion highlights how compliance is no longer limited to interpreting rules or maintaining frameworks. It is increasingly defined by how leaders apply judgement, influence decisions, and integrate compliance into business operations.

A central theme is the distinction between technical capability and leadership effectiveness.

While data and AI are reshaping compliance functions and enabling new forms of monitoring and insight, they do not determine how compliance performs in practice.

The extract identifies the core capabilities shaping modern compliance leadership:

• the ability to interpret and apply data in context
• the judgement to act under uncertainty
• the influence required to shape decisions across the organisation
• the curiosity to ask better questions
• the empathy needed to build alignment and drive change

This creates a shift in how the Chief Compliance Officer role is understood.

Compliance is no longer a purely technical discipline. It is a leadership function operating at the intersection of governance, risk management, and decision-making.

The discussion also introduces the concept of “flair”.

This reflects the ability to bring compliance to life within the organisation, through how rules are interpreted, how messages are communicated, and how compliance is embedded into day-to-day operations.

For organisations, this has practical implications.

Enterprise risk management, compliance frameworks, and governance structures provide the foundation. The effectiveness of compliance depends on how these are applied in real situations.

This includes:

• how compliance is integrated into decision-making
• how leaders balance technical accuracy with practical judgement
• how influence is exercised across functions
• how ambiguity is managed in complex environments

Strengthening these capabilities improves how organisations anticipate issues, respond to risk, and align compliance with strategic objectives.

This extract is taken from the RiskMasters episode with Jennifer Geary and Natalie McManus, exploring the Chief Compliance Officer role, compliance leadership, and the future of governance and decision-making.