Culture of owning the responsibility individually and collectively by board; clear demarcation of accountability of senior management, functional head and operational head; role of business unit as first line of defence and role of internal audit as third level of defence in facilitating robust compliance culture are all important.
Communication: Clarity and transparency should be promoted by making a distinction between general standards for all staff members and rules that only apply to specific groups of staff.