Tone in the Middle: Embedding Compliance Where It Matters Most

1. Introduction

While "Tone at the Top" sets the vision for compliance, "Tone in the Middle" ensures it is translated into reality. Managers — from department heads to regional executives — play a critical role in embedding ethics, enforcing controls, and shaping the everyday culture of compliance.

According to ISO 37301 and GACP 2025, middle management is the transmission belt between strategic intent and operational execution.

Crest Advisory Africa trains and empowers these vital compliance champions through tailored ISO training and our ISOLTX GRC platform.

2. Defining “Tone in the Middle”

“Tone in the Middle” refers to how mid-level leaders demonstrate and enforce compliance values in their day-to-day interactions with teams, policies, and decision-making. It involves interpreting the top-level commitment and ensuring it's practically implemented, monitored, and enforced on the ground.

3. These individuals — often overlooked — are responsible for:

  • Supervising teams
  • Translating policy into procedures
  • Managing frontline risk
  • Escalating issues
  • Modelling ethical behaviour

4. ISO 37301: Clause-by-Clause Relevance

5.1 ISO 37301 recognises the middle layer through:

  • Clause 5.3: Clearly assigns compliance roles and responsibilities across the organisation.
  • Clause 7.2 & 7.3: Emphasises competence, awareness, and training at all operational levels.
  • Clause 8.1: Requires operational planning and control at process owner level — often within middle management's domain.
  • Clause 9.1: Encourages measurement and monitoring that should be implemented by managers responsible for compliance KPIs.

5. GACP 2025: Operationalising Culture

  • In GACP Principle 7 (Compliance Culture) and Principle 12 (Communication and Reporting), the role of line managers, compliance liaisons, and operational supervisors is pivotal.
  • They must communicate compliance messages consistently.
  • Actively monitor and correct non-compliance.
  • Build a feedback loop between staff and top management.
  • Provide mentorship and corrective guidance.
  • This middle-tier engagement is where policies become practices — or where they can fall apart.

6. Why “Tone in the Middle” Is Critical

  • Proximity to the Workforce: Employees emulate their immediate supervisors more than the CEO.
  • Day-to-Day Decision Influence: Most compliance decisions happen at the operational level.
  • Risk Control: Operational processes contain real-time risks (e.g., procurement, contracting, financial approvals).
  • Escalation Pathways: Middle management is the first point of whistleblower interaction.

7.  Common Pitfalls in the Middle Tier

❌ Middle managers are uninformed or poorly trained in compliance.
❌ Focus remains on KPIs, not ethical outcomes.
❌ Managers ignore red flags to meet operational targets.
❌ Policy vs. practice gaps widen due to passive enforcement.

This gap is often the weakest link in compliance implementation — and the most fixable.

8. Five Keys to Strengthening Tone in the Middle

✔ Equip managers with compliance leadership training (ISO 37301, ISO 37001).
✔ Include them in risk assessments and control design.
✔ Embed compliance into operational targets and performance appraisals.
✔ Ensure open, two-way communication channels with executive leadership.
✔ Celebrate and recognise ethical decision-making and role modelling.

9. How Crest Advisory Africa Adds Value

Through our PECB-aligned training and ISO CMS implementation, we equip middle management to:

· Champion compliance policies

· Detect and respond to risk

· Influence culture through consistent messaging

· Escalate violations and resolve dilemmas ethically

· Our ISOLTX GRC software also decentralises compliance through role-based dashboards, automated reminders, performance metrics, and reporting — empowering your middle tier to lead with clarity and consistency.

10. Conclusion

Leadership doesn't stop at the top — it lives in the daily decisions of those who manage people, processes, and risks.

“Tone in the Middle” is where policies come to life, and where the success of your compliance system is truly tested.

Crest Advisory Africa helps organisations build a culture of compliance from the top down and the middle out.

11. Book a Training or Consultation

Empower your middle managers with ISO-aligned compliance leadership.

🌐www.crestadvisoryafrica.com
📧 info@crestadvisoryafrica.com