An Existing Law and New Technology To Prevent Bad Things from Happening to People and Organizations


  • Sexual harassment and assault, authority figures having sex with minors, abuse, defalcation, fraud, discrimination – outright racism, theft, bribery, safety and security breaches, violations of law, policy and procedures - it seems that at least one such incident makes the news every week. We’re becoming inured to what has been infamous, but to the victims the implications are very real and may be horrifying. And for every incident in the news there are hundreds that never become public knowledge. All of them share three common characteristics:
    • They were caused by an individual’s or individuals’ aberrant behavior. (Of the incidents we studied, all except one had passed a recent background check.)
    • The behavior undermined the organization’s performance, in some cases significantly.
    • Virtually all the harm to the victim(s) and the organization would have been avoided if the behavior had been promptly addressed.


The Law

  • What hasn’t been reported and is little known is that Sarbanes-Oxley includes a provision that applies to all organizations regardless of size or governance.
  • The well-known law directs the U.S. Sentencing Commission to review and amend the Sentencing Guidelines to ensure that they deter and punish criminal misconduct in all organizations.
  • The associated and routinely revised Sentencing Guidelines are well-crafted, compelling and require all organizations to have an effective compliance and ethics program, including a reporting system, to prevent and detect unlawful acts.
  • There are no legal penalties if a nonpublic entity does not have an effective compliance and ethics program. However just having an effective compliance and ethics program can enable a nonpublic entity or leader to avoid prosecution or reduce a nonpublic entity’s or leader’s fine or sentence in the event of a prosecution. And increasingly, there are civil implications associated with nonpublic entities or leaders not having an effective compliance and ethics program.
  • The American Bar Association notes that in addition to avoiding liability, programs to raise and address problems are a good business practice and regardless of governance or size, every organization should voluntarily implement them. “Should the benefits of compliance not be significant, avoiding liability should be.”
  •  An effective compliance and ethics program enables an organization to avoid risk.


Research and Solution

  • 1st Notice has been studying organization behavior for decades and evaluated and consulted on these types of incidents. In over 98% at least one other person knew of the behavior and in 93%, multiple people at least strongly suspected the aberrant behavior. In almost half of all incidents it was considered “common knowledge”.
  • Since the Penn State child sex abuse became public knowledge 1st Notice has been conducting seminal and extensive research on why people do not report serious issues and what it would take for them to do so, to optimize reporting.
  • Based on the research, applications were developed, tested and refined to increase serious issue notifications. Although there is a lot more to the applications, they enable people to communicate when they want, how they want and what they want. And responding to continual input from populations that may have critical information to report will set an ever-higher standard for effectiveness. Organizations provided input regarding functionality including dashboards and reports.
  • Recent research indicates that all surveyed populations are far more likely to report serious issues using 1st Notice applications than they would with designated procedures.
  • There is already anecdotal data that the 1st Notice application has the prophylactic effect that psychologists and law enforcement predicted.
  • Publicity about the research led to a group of mothers’ assuming the role of advisors and asking – demanding a means to know if schools and youth programs had an effective compliance and ethics program and notification system to protect their children. (Interestingly, a CEO asked the exact same question about protecting her company in my book, Outsourcing: The Definitive View, Applications, and Implications.)
  • The mothers ultimately proposed and designed Shields which are now incorporated into all applications.



  • Although the benefits of compliance are significant, only about 4% of nonpublic entities have an effective compliance and ethics program.
  • Until recently small organizations largely ignored the most serious implications of these incidents, but that’s changing. The National Federation of Independent Business, for example, is offering programs on sexual harassment; 60% of their members have between one and five employees.
  • Organizations should ensure that their partners, suppliers, contractors and borrowers have at least an effective compliance and ethics program. (The lack of a program, for example, is responsible for over $60M in bank losses from an oil and HVAC provider.)
  • Rules aren't enough. Pennsylvania, for example, “mandates” educators report suspicions of abuse and neglect. U.S. Senator Casey has proposed a similar, national SPEAK Up Act yet while I was meeting with his staff about our research a Springfield Township Pennsylvania teacher was arrested for having sex with two middle school students. Numerous students, teachers and administrators knew of the growing relationships months before the sex.
  • Predators and other criminals know that procedures, policies and even laws alone are unlikely to result in anyone reporting their illegal behavior.
  • Laws, policies, procedures and training, without a system people trust, are ineffective.
  • Effective notifications systems don’t just prevent and detect wrongful acts, they also provide a critical conduit for positive communication.