IOWL Working Paper - Compliance, Risk & Conduct

From Compliance to Conduct
Why rules, controls and governance still depend upon human judgement in practice

Boards, compliance and risk professionals, regulators, public bodies, professional organisations, accountable executives and institutional leaders.

Read the perspective > Read the full working paper >

Working revision 2 September 2026 - Version 0.3

The proposition in 30 seconds

IOWL working proposition

Compliance can specify what must, may or must not be done. Governance can establish controls and accountability. Ethics can define professional expectations. None of them is self-executing. Real conduct emerges when a person with Capability and Competency meets pressure, incentives, ambiguity, responsibility and discretion. IOWL asks whether Calibre strengthens the reliability of that moment.

A rule can define the boundary. It still takes a person to interpret, apply, challenge, enforce, escalate, work around or deliberately cross it.

Compliance is necessary. It is not self-executing.

Modern organisations require law, regulation, policies, professional standards, audit, governance, risk management and internal controls. The proposition in this paper is not to weaken any of them. It is to examine what happens at the point where those systems meet a human decision.

RulesWHAT MUST, MAY OR MUST NOT BE DONE?Law, regulation, policy, standards, controls and contractual obligations establish necessary external requirements and boundaries.
Professional judgementWHAT DOES THIS SITUATION REQUIRE?Professionals interpret evidence, competing duties, risk, uncertainty, proportionality, consequence and context.
CalibreHOW WILL RESPONSIBILITY BE EXERCISED?IOWL focuses on the judgement, integrity, responsibility, Positive Values and behavioural reliability governing how Capability and Competency are used.
The issue is not whether governance should be strengthened.It is whether strengthening governance alone addresses the human judgement that made the governance intervention necessary.

The Axiological Pyramid: what sits beneath compliance?

IOWL's Axiological Pyramid distinguishes six connected strata through which judgement is expressed, aligned, guided, governed and constrained. It is not a sequence in which one layer replaces another. It is a model of the relationship between increasingly internal and increasingly external sources of behavioural guidance.

The upper strata are necessary. The question is how much work external control must do when the human foundation below is weak, conflicted or materially out of alignment.

ComplianceExternal requirements: law, regulation and mandated standards
GovernanceInternal organisational systems of direction, control and accountability
EthicsProfessionally determined expectations of conduct
Organisational ValuesContextual commitments declared and expected by an institution
MoralsSocially influenced judgements and expectations
ValuesPersonal, internal and capable of examination and development
Inside-out development and judgementOutside-in assurance, control and constraint

Where the strata broadly reinforce one another, the system has a stronger basis for dependable conduct. Where they conflict, upper layers may carry more of the burden through surveillance, escalation, sanction and enforcement.

Trust is not another layer of the pyramid. Trust is an outcome that can become more plausible when the strata are coherent and conduct repeatedly proves worthy of reliance.

The Conduct Gap

A compliance framework can be strong on paper while conduct remains weak in practice. IOWL uses the Conduct Gap as a diagnostic description of the difference between what formal systems require and what people actually do.

Required conductLaw, policy, ethical standards, control design, governance expectations and stated organisational values.
CONDUCT GAPThe difference between formal expectation and behaviour in practice, especially under pressure, ambiguity, incentive or discretion.
Observed conductActual decisions, escalation, challenge, reporting, treatment of stakeholders, use of information, control operation and response when nobody is prompting the correct action.

The Conduct Gap is not an official regulatory statistic and should not be attributed automatically to poor Calibre. Control design, resourcing, training, organisational structure, conflicting rules and weak supervision can also produce implementation failure. The purpose is to ask what type of gap exists before prescribing another rule.

Inside-out trustworthiness and outside-in control

A person may comply because the rule is monitored and breach is likely to be detected. That is a legitimate function of control. A different form of dependability exists when the person also understands why the responsible behaviour matters and would make the same judgement when surveillance is weak or absent.

External controlPolicy, supervision, audit, monitoring, reporting, enforcement and sanction constrain behaviour from outside the individual.
Internal groundingValues, integrity, responsibility and consequence-awareness influence what the person chooses before enforcement becomes necessary.
Aligned systemThe most resilient proposition is complementarity: strong external controls supported by people whose internal judgement broadly reinforces the same responsible outcome.

IOWL therefore does not frame Calibre as a substitute for control. It asks whether stronger inside-out development may reduce the distance between the conduct a system has to compel and the conduct a person is prepared to demonstrate voluntarily.

Doing things right and doing the right thing

Compliance is indispensable to doing things right: following applicable law, rules, standards and required process. Yet not every difficult conduct question is resolved by locating a clause. Professionals encounter competing duties, incomplete evidence, legal discretion, conflicting incentives, novel technology, pressure from senior colleagues and circumstances in which the minimum permitted action is not necessarily the most responsible action.

Doing the right thing does not authorise anyone to ignore law or professional obligations. The distinction is narrower. It concerns how responsible judgement operates within lawful boundaries when compliance does not provide a complete answer.

Capability may enable a person to understand the rule. Competency may enable them to operate the process. Calibre concerns how, why and for whose benefit they exercise judgement when the rule still leaves a human choice.

Why more capable people can create more sophisticated conduct risk

Technical Capability and Competency are essential to effective compliance. They can also increase the sophistication with which a poorly grounded person identifies gaps, rationalises conduct, exploits ambiguity, circumvents a control or structures activity to satisfy form while defeating purpose.

This is not an argument that expertise causes misconduct. It is the opposite: expertise increases what a person is capable of doing, for good or ill. The direction of that capability remains a separate question.

Control avoidanceKnowledge of systems can make weaknesses and workarounds easier to identify.
RationalisationHigh expertise can support sophisticated explanations for why questionable conduct is technically permissible.
Information asymmetrySpecialists may understand risks or consequences that supervisors, customers or colleagues cannot easily observe.
Authority amplificationAs responsibility grows, one person's judgement may affect larger teams, customers, markets, institutions or public outcomes.

The implication is balance: stronger Capability and Competency should increase the importance, not reduce the importance, of examining Calibre.

Culture, incentives and the permission to challenge

Conduct does not occur in isolation. Incentives, targets, leadership behaviour, informal norms, reward systems and perceptions of what happens to people who speak up can reinforce or undermine the formal framework.

The Financial Reporting Council's guidance to the UK Corporate Governance Code explicitly connects governance quality with stakeholder relationships, speak-up culture, ethics and compliance, and states that the effectiveness of risk management and internal control ultimately depends on the individuals operating the framework. That is independent context for the human-conversion problem, not validation of IOWL's model.

A values statement that says one thing while incentives reward another creates misalignment. A whistleblowing policy that exists formally but is socially dangerous to use creates misalignment. A board that requests challenge but punishes unwelcome information creates misalignment. The Axiological Pyramid provides one way of making those contradictions visible.

Speaking up is a conduct mechanism

Many compliance systems depend upon people raising concerns before a formal control or external regulator detects the issue. Speaking up therefore requires more than knowledge of a reporting channel. It can require judgement, courage, responsibility, evidence, proportionality and willingness to accept personal or relational cost.

Calibre should not be used to romanticise whistleblowing or assume every challenge is correct. Responsible challenge also requires fairness, accuracy, confidentiality and consequence-awareness. The proposition is that a system reliant on escalation should develop and support the human qualities needed to use escalation well.

Boards cannot outsource conduct

Boards can delegate compliance functions, risk monitoring, internal audit and operational control. They cannot sensibly treat culture and conduct as matters owned only by those functions. Governance creates the environment in which people learn what is genuinely valued, what information is welcome, how failure is handled and whether integrity survives commercial or political pressure.

The UK Corporate Governance Code 2024 places board attention on purpose, culture, risk and internal control and, from 2026, requires a declaration relating to the effectiveness of material internal controls. Its accompanying guidance emphasises behaviour, integrity, speak-up culture and the individuals who operate the framework.

Compliance is a function. Conduct is an organisational outcome.The compliance team can advise, monitor and challenge. The lived conduct of the organisation is produced across leadership, management, incentives, professional judgement and everyday decisions.

Regulators are increasingly explicit about individual conduct and accountability

Financial regulation provides useful examples of the distinction between organisational systems and individual behaviour. In the United Kingdom, the FCA's Senior Managers and Certification Regime is designed to strengthen individual accountability and improve conduct. The FCA Conduct Rules set minimum standards of individual behaviour, including integrity, due skill and care, regulatory cooperation, fair treatment, proper market conduct and, for relevant staff, delivery of good retail outcomes.

In Ireland, the Central Bank's Individual Accountability Framework combines the Senior Executive Accountability Regime, Conduct Standards and enhanced Fitness and Probity requirements. The framework makes responsibility and decision-making more explicit and applies conduct expectations directly to individuals in regulated firms.

Neither regime validates the IOWL Calibre construct. Both demonstrate that mature regulatory systems already recognise an important point: organisational compliance cannot be separated completely from individual conduct, responsibility and accountability.

Trust should follow trustworthiness

Compliance can increase confidence by creating clear standards, monitoring and consequences. Yet formal compliance is not identical to trustworthiness. An institution can satisfy a reporting requirement while behaving evasively, treat disclosure as a technical exercise rather than meaningful openness, or comply with the letter of a process while repeatedly producing conduct stakeholders experience as unfair.

IOWL therefore treats trustworthiness as the more useful upstream objective. Trust is held by another person. Trustworthiness is demonstrated through conduct. Strong governance can support trustworthiness, but communication cannot replace it.

Trust is not another stratum of the Axiological Pyramid.It is an outcome that can emerge when personal values, professional expectations, organisational commitments, governance and compliance broadly align and conduct repeatedly proves worthy of reliance.

Technology and AI do not remove the conduct problem

Automation can make controls faster, more consistent and easier to monitor. AI can identify anomalies, support surveillance, analyse transactions and assist decision-making. It can also scale assumptions, obscure responsibility, create new information asymmetries and allow poor decisions to affect more people more quickly.

When technology changes what can be done, the compliance framework must adapt. But the human question remains: who determines purpose, proportionality, escalation, override, acceptable risk and consequence? Increasing technical capability can therefore magnify the importance of responsible judgement.

PCD as conduct maintenance and recalibration

A compliance course can update knowledge. A code can state expectations. A certification can evidence a point-in-time assessment. None establishes permanent future conduct. Roles, authority, incentives, technology, relationships and pressures change.

ReaffirmMake demonstrated Calibre visible and examine whether it remains evident in continuing conduct.
DevelopStrengthen judgement, responsibility, integrity-related behaviour or consequence-awareness where development is needed.
TransferApply Calibre consciously as a person moves between teams, organisations, professions, regulated contexts or leadership roles.
RecalibrateReconsider judgement as authority, incentives, regulation, technology, pressure and stakeholder consequence change.

PCD therefore complements continuing professional and compliance education. CPD may renew what a person knows and can do. PCD continually examines how, why and for whose benefit that changing Capability and Competency are exercised.

The economic question: how much control must weak alignment require?

Compliance systems consume legitimate resources: monitoring, audit, reporting, investigation, remediation, legal review, training, supervision and enforcement. These are costs society and organisations often need to bear because the consequences of failure can be severe.

IOWL's research proposition is not that high Calibre eliminates these costs. It is whether stronger alignment between inside-out judgement and outside-in requirements can reduce some avoidable friction: repeated remediation, preventable control override, misconduct, concealment, low-quality escalation, distrust and defensive bureaucracy.

Research proposition, not an established equationStrong controls + stronger human alignment > more dependable conduct > potentially lower avoidable conduct loss and control friction

Independent context: the implementation gap is real

The OECD Anti-Corruption and Integrity Outlook 2026 reports that, across the areas it measures, OECD countries show an average 19 percentage-point gap between the strength of integrity regulations and their implementation in practice. The largest implementation gaps include civil-service disciplinary systems and conflict-of-interest management.

This is a valuable external illustration of the distinction at the centre of the paper: formal architecture and implementation are not identical. It does not establish that Calibre explains the gap. The research question is whether a separately measured human dimension adds useful explanatory or developmental value alongside institutional, legal and administrative determinants.

Policy and evidence context

This paper sits beside, rather than replaces, existing regulatory, governance, professional and legal systems. The sources below are orientation points rather than an exhaustive compliance register.

Your policy lens

A directly tailored national compliance register for your location has not yet been added to this edition. International comparator sources are shown below. The paper should be read against the legal, regulatory and professional requirements applying in your jurisdiction and sector.

International and comparative sources

OECD Anti-Corruption and Integrity Outlook 2026Current cross-country evidence on formal integrity frameworks and implementation gaps.
OECD Public IntegrityPublic Integrity Indicators and implementation evidence.
FRC Corporate Governance Code GuidanceIndependent governance guidance connecting culture, conduct, ethics, compliance, challenge and the operation of controls.

Where OECD, FCA, FRC or other external material is used, it provides policy and regulatory context. It does not imply endorsement, validation or adoption of IOWL frameworks by those organisations.

Full working paper

From Compliance to Conduct

This longer version separates established regulatory and governance context from the IOWL proposition, develops the Axiological Pyramid and Conduct Gap, and sets out questions for longitudinal and independent examination.

IOWL Working Paper - Version 0.3 - 2 September 2026

From Compliance to Conduct

Why rules, controls and governance still depend upon human judgement in practice

Principal audience: Boards, compliance and risk professionals, regulators, public bodies, professional organisations, accountable executives and institutional leaders.

1. Compliance is necessary but not self-executing

Modern organisations require external and internal systems of control because personal good intention is not enough to govern complex institutions. Law establishes mandatory boundaries. Regulation sets sector expectations. Governance allocates authority and accountability. Policies translate requirements into organisational practice. Audit and monitoring test whether controls operate.

Yet every one of those systems eventually reaches a person. Someone interprets the requirement, designs the process, chooses whether evidence is sufficient, decides whether to escalate, determines how strictly to enforce, responds to pressure, explains an exception or chooses whether to work around the control.

The compliance problem is therefore partly a conversion problem: how does a formal requirement become actual conduct?

2. The Axiological Pyramid

IOWL's Axiological Pyramid distinguishes Values, Morals, Organisational Values, Ethics, Governance and Compliance. Values are personal and internal. Morals are socially influenced. Organisational Values create contextual commitments. Ethics provides professionally determined expectations. Governance provides internal direction, control and accountability. Compliance reflects external law, regulation and mandated requirements.

The model does not suggest that the lower layers are morally superior or that the upper layers should disappear. Strong institutions require professional ethics, governance and compliance. The model instead asks where behavioural guidance originates and how much external control is required when internal judgement is weak, conflicted or misaligned.

This creates the core distinction of the paper: sustainable trustworthiness is developed partly from the inside out, while regulation and formal control necessarily operate from the outside in.

3. The Conduct Gap

A policy can exist while conduct contradicts it. A code can require integrity while incentives reward silence. A control can be documented while staff routinely bypass it. An organisation can report formal compliance while stakeholders repeatedly experience behaviour inconsistent with its stated values.

IOWL uses the Conduct Gap to describe the difference between formal expectation and observed behaviour. The concept is diagnostic, not causal. A gap may reflect poor rules, weak systems, insufficient resources, contradictory incentives, lack of training, ineffective supervision, cultural pressure or poor individual judgement.

The question for Calibre research is whether separately evidencing judgement, integrity, consequence-awareness and behavioural reliability improves diagnosis beyond conventional competency and control assessments.

4. Rules, professional judgement and Calibre

Three questions recur in difficult compliance situations. Rules ask what must, may or must not be done. Professional judgement asks what the particular facts, duties, risks and consequences require. Calibre asks how, why and for whose benefit responsibility will be exercised.

The questions overlap but are not identical. A technically competent compliance professional may interpret the rule correctly and still fail to challenge conduct because commercial incentives or hierarchy create pressure. Conversely, a person with good intent but insufficient technical expertise may make a poor compliance judgement. Dependable conduct requires the dimensions to work together.

5. Doing things right and doing the right thing

Doing things right means, among other things, complying with applicable legal, regulatory, professional and organisational requirements. Doing the right thing concerns responsible judgement within those lawful boundaries when the formal rule does not exhaust the decision.

This distinction matters because compliance systems routinely rely on proportionality, reasonableness, materiality, risk assessment, professional scepticism and escalation. These are not mechanical concepts. They require human interpretation.

IOWL therefore does not use "doing the right thing" as permission to disregard formal authority. The proposition is that outside-in rules and inside-out judgement should reinforce one another wherever possible.

6. Capability can increase both protection and risk

Greater expertise can make a control system stronger. Skilled specialists identify emerging risks, interpret complex obligations and design better controls. The same Capability can also make circumvention more sophisticated when conduct is badly directed.

A person who understands a system deeply may understand exactly where its blind spots lie. A highly capable executive may know how to structure a decision so it passes a formal test while avoiding its purpose. A technically sophisticated organisation may comply with reporting form while obscuring meaningful substance.

This is why Capability and Competency should not be treated as evidence of Calibre. Technical sophistication expands capacity; it does not determine the direction of its use.

7. Culture and incentives are part of the control environment

People learn what an organisation truly values by observing what leaders reward, tolerate, investigate and ignore. Formal values matter, but behaviour under pressure often reveals the operative culture more clearly than a statement on a wall.

The FRC's current Corporate Governance Code Guidance directly connects governance quality with stakeholder relationships, speak-up culture, ethics and compliance, and observes that the effectiveness of risk management and internal control ultimately depends on the individuals responsible for operating the framework.

This independently supports the relevance of the human layer without validating IOWL's specific architecture. It also shows why boards cannot sensibly treat conduct as a specialist issue owned only by compliance.

8. Speaking up, escalation and responsible challenge

Controls often depend upon human beings noticing that something is wrong and taking action before an automated system, audit or regulator identifies it. The decision to speak up can require courage, evidence, proportion, fairness, confidentiality and acceptance of personal cost.

A strong conduct system therefore needs more than a reporting channel. It needs people who recognise responsibility, leaders who receive challenge appropriately, protections against retaliation, and processes capable of distinguishing serious concerns from unsupported allegation.

Calibre development is relevant to both sides of that interaction: the person raising the concern and the person receiving it.

9. Boards and accountable executives

Boards create the formal environment in which conduct takes place. They approve governance frameworks, set risk appetite, oversee remuneration, appoint senior leaders and determine whether culture and control receive meaningful attention.

The UK Corporate Governance Code 2024 increases board emphasis on material internal controls and, from 2026, Provision 29 applies to reporting on their effectiveness. The accompanying FRC guidance also focuses on outcomes, integrity, culture, challenge and behaviour.

IOWL's proposition is complementary: a board can strengthen the control architecture while also examining the Calibre of people who exercise authority within it. One is not a substitute for the other.

10. Individual accountability regimes point toward conduct

Regulatory development in financial services illustrates a broader trend. The FCA's Senior Managers and Certification Regime aims to strengthen individual accountability and improve conduct, while its Conduct Rules apply minimum behavioural standards directly to individuals. Following 2026 reforms, the regime continues to emphasise personal responsibility, conduct and accountability while reducing some administrative burden.

Ireland's Individual Accountability Framework similarly combines senior executive accountability, direct Conduct Standards and Fitness and Probity requirements. These frameworks do not provide Calibre assessment in IOWL's sense, but they demonstrate that regulators already recognise a gap between organisational compliance architecture and the behaviour of accountable individuals.

11. Trustworthiness is upstream of trust

Compliance is often intended partly to protect confidence in markets, professions and institutions. Yet compliance and trustworthiness are not identical. A technically compliant organisation may still appear evasive, opportunistic or unfair if its conduct repeatedly frustrates the purpose stakeholders reasonably expect.

IOWL therefore treats trustworthiness as an upstream quality and trust as an outcome. Trust is held by another person. Trustworthiness is demonstrated through repeated conduct.

Within the Axiological Pyramid, trust is not another upper stratum. It becomes more plausible when internal values, social expectations, organisational commitments, professional ethics, governance and external compliance broadly reinforce one another.

12. Technology changes controls but not the human responsibility problem

Technology can automate monitoring, detect anomalies, record decisions and strengthen surveillance. AI can accelerate risk analysis and identify patterns that human review would miss. These are valuable capabilities.

Technology also creates new discretion. Someone decides which data matter, what thresholds trigger investigation, when automated output may be overridden, how false positives are treated, how bias is identified and where human judgement remains necessary.

The control may be technological, but responsibility does not vanish. Increased technical capability therefore intensifies the need for clear accountability and sound judgement.

13. The cost of misalignment

Weak conduct can generate direct and indirect costs: fines, remediation, litigation, customer redress, investigation, rework, lost contracts, management distraction, employee turnover, higher monitoring costs and reduced willingness to cooperate or share information.

Not all such losses are Calibre-related. The research proposition is narrower: where a material portion of avoidable loss is linked to judgement, integrity, silence, misuse of authority or behavioural inconsistency, can Calibre development and longitudinal evidence reduce risk or improve diagnosis?

This connects From Compliance to Conduct with the Performance Gap and Capacity Conundrum. The organisation may possess substantial technical and governance capacity while still losing value during human conversion.

14. PCD as conduct maintenance

Compliance knowledge dates. Regulation changes. Professional responsibilities expand. New technology creates new risks. Organisational authority increases. PCD addresses a different but related problem: whether Calibre is reaffirmed, developed, transferred and recalibrated as those changes occur.

A one-time course cannot guarantee future conduct. Neither can a Calibre credential. PCD provides a continuing framework through which demonstrated judgement and conduct can be examined across changing contexts rather than assumed to remain constant.

This is the distinction from conventional CPD: CPD commonly renews what a person knows and can do. PCD continually examines how, why and for whose benefit that changing Capability and Competency are exercised.

15. What established systems already do

This paper does not claim that compliance, risk or governance practice ignores culture and behaviour. Contemporary frameworks explicitly address them. The FRC links culture, values, ethics, behaviour and speak-up mechanisms to governance and control. The FCA and Central Bank of Ireland apply conduct and accountability standards directly to individuals. Anti-bribery frameworks require preventive procedures. OECD integrity systems distinguish regulations from implementation.

The IOWL contribution is therefore not the discovery that people matter. Its bounded configuration claim concerns the combination of a distinct Calibre dimension, the Axiological Pyramid, structured development through Positive Value Leadership, bounded recognition, and PCD as a continuing development and evidence architecture.

16. Independent evidence of the implementation problem

The OECD Anti-Corruption and Integrity Outlook 2026 reports an average 19 percentage-point gap across OECD countries between the strength of integrity regulations and implementation in practice. The report identifies particularly large gaps in civil-service disciplinary systems and conflict-of-interest management.

This evidence matters because it demonstrates independently that formal integrity architecture and implementation can diverge. It does not demonstrate that Calibre is the missing cause. That remains an empirical proposition requiring measurement alongside legal, institutional, political, cultural and administrative factors.

17. The IOWL research programme

IOWL's current evidence is strongest at the developmental level. Its Emerging Evidence architecture includes quantitative learner measures, assessed learning, qualitative Reflective Transformation evidence and continuing PCD measures. Current internal findings are interpreted as evidence of developmental outcomes relating to judgement, self-regulation, speaking up, responsibility, collaboration and values-led conduct.

The next evidential step is longitudinal application: whether those outcomes are externally observed, sustained under pressure and associated with relevant conduct indicators in workplaces, professions or public institutions.

18. How the compliance proposition could be tested

A useful research design should distinguish Calibre from existing controls and from technical compliance capability.

Evidence layerWhat should be examinedWhy it matters
Formal architectureApplicable law, regulation, policies, governance, controls, audit arrangements, incentives and escalation mechanisms.Establishes what the system already requires and what institutional factors may explain conduct.
Capability and CompetencyRole knowledge, professional qualification, technical compliance knowledge and process competence.Prevents Calibre from being used as a substitute explanation for lack of expertise.
Calibre-related evidenceJudgement, consequence-awareness, integrity-related behaviour, responsibility, speaking up, self-regulation and use of discretion.Tests whether a separately defined human dimension adds useful information.
Conduct outcomesControl overrides, repeat findings, incident quality, escalation, near misses, disciplinary outcomes, customer or stakeholder harm, remediation and observed behaviour.Moves beyond course completion toward application in practice.
Longitudinal evidenceRepeated observation as roles, authority, incentives and pressure change.Tests transfer and reliability rather than a single point-in-time result.
Independent evaluationExternal replication, comparison groups where appropriate and methods capable of testing alternative explanations.Keeps developmental evidence separate from causal claims.

The proposition should be capable of failing. If Calibre evidence does not add explanatory or developmental value beyond established controls, competence and organisational factors, the model should be revised.

19. Implications for boards, compliance functions and regulators

  • Do not assume every conduct failure is evidence that another rule is required; diagnose whether the weakness is legal, technical, cultural, incentive-related, behavioural or mixed.
  • Examine whether stated values, reward systems, leadership behaviour, professional ethics, governance and external compliance are materially aligned.
  • Treat speak-up, escalation and challenge as conduct capabilities requiring both systems and human support.
  • Keep Capability, Competency and Calibre conceptually distinct when assessing accountable individuals.
  • Use PCD to revisit judgement as authority, role, technology and regulatory consequence change.
  • Evaluate Calibre interventions independently rather than treating programme participation as proof of reduced conduct risk.

20. Bounded proposition

IOWL does not claim that Calibre eliminates misconduct, replaces compliance, predicts every future decision or makes formal control unnecessary. Nor does a Calibre credential certify that a person will always act well.

The bounded proposition is narrower: whether a distinct, developable and longitudinally evidenced Calibre dimension strengthens the human reliability upon which governance and compliance systems ultimately depend, and whether it adds useful explanatory value to the gap between formal requirements and conduct in practice.

Research questions

  • Where do formal compliance systems show the largest gaps between policy and lived conduct?
  • Can Calibre-related evidence identify conduct risk not captured by technical competency or control testing?
  • How strongly do incentives, leadership behaviour and speak-up culture moderate the relationship between Calibre and observed conduct?
  • Does PCD support more reliable judgement as discretion and authority increase?
  • Can alignment across the Axiological Pyramid be operationalised without reducing values to another compliance checklist?
  • Does stronger inside-out alignment reduce avoidable reliance on surveillance, remediation or repeated enforcement?
  • What indicators most credibly distinguish compliant activity from trustworthy conduct?

Source trail and selected literature

Research and accuracy note: This working paper distinguishes established external regulation, governance literature and policy context from IOWL definitions, conceptual propositions, internal emerging evidence and questions requiring longitudinal or independent evaluation. The Conduct Gap is an IOWL diagnostic description, not an official regulatory measure. External sources provide context and do not imply endorsement, validation or adoption of IOWL frameworks.