Tone at the Top: The Catalyst for Compliance Culture

1. Introduction

In the realm of effective compliance management, few factors weigh as heavily as “Tone at the Top”. This principle — embedded in ISO 37301:2021 and ISO 37001:2025 — defines the visible commitment of the governing body and senior management to ethical conduct and compliance excellence. At Crest Advisory Africa, we emphasize that compliance begins not with policies, but with leadership.

2. What is “Tone at the Top”?

“Tone at the Top” refers to the ethical climate, values, and compliance attitudes demonstrated by an organisation's leadership. As stated in ISO 37301 Clause 5.1 and supported by ISO 37001 Clause A.5, leadership must be active, visible, consistent, and sustained in their commitment to compliance.

It is not just about spoken values — it's about leading by example, ensuring every decision, communication, and behaviour from leadership reinforces a culture of integrity.

3. ISO 37301: Leadership as a Foundation

ISO 37301 highlights leadership as the cornerstone of a Compliance Management System (CMS):

  • 5.1 Leadership and commitment requires that top management ensure the compliance policy is established, resourced, and integrated into daily operations.
  • They must promote continual improvement, model compliance behaviour, and hold others accountable
  • The standard makes it clear: Without leadership, a compliance system lacks credibility and authority.

4. ISO 37001: Anti-Bribery Leadership in Practice

ISO 37001 goes further in defining governing body responsibilities in driving an anti-bribery culture:

  • Leadership must approve and align the anti-bribery policy with strategic objectives.
  • Management must demonstrate active implementation, ensure whistleblowing protections, and champion ethical conduct across all levels.

These actions represent more than compliance — they demonstrate accountability and corporate citizenship.

5. GACP 2025: Leadership & Compliance Culture

The Generally Accepted Compliance Practice (GACP) also affirms that the governing body and executive leadership bear ultimate accountability for compliance. Principle 3 of GACP states that leadership must:

  • Establish governance structures that support ethical culture and legitimacy.
  • Actively promote awareness, oversight, and consequence management.
  • Lead by example and instil compliance values throughout all operations.

6. Why “Tone at the Top” Matters

  • Trust and Integrity: Stakeholders are more likely to trust organisations where leadership visibly upholds ethical conduct.
  • Cultural Cascade: Behaviour at the top sets the tone for the rest of the company — good or bad.
  • Risk Reduction: A strong ethical culture reduces exposure to regulatory breaches, fraud, and reputational damage.
  • Compliance Sustainability: Systems backed by committed leadership are more likely to survive structural or personnel changes.

7. Building the Right Tone: A Strategic Checklist

  • Issue a clear, signed compliance policy endorsed by the CEO and board.
  • Allocate resources and authority to your compliance function.
  • Deliver consistent messaging from leadership in town halls, emails, and trainings.
  • Include compliance KPIs in executive performance reviews.
  • Encourage whistleblowing and protect against retaliation.
  • Celebrate ethical behaviour as part of organisational culture.

8. How Crest Advisory Africa Supports Leaders

Crest Advisory Africa delivers PECB-accredited ISO 37301 and ISO 37001 training for executives, boards, and compliance leaders. Our programs equip leadership with:

  • Strategic governance skills
  • Real-world risk scenarios
  • Custom ISO-aligned compliance tools
  • The roadmap to build and sustain a compliance culture

We also integrate these principles into our ISOLTX GRC software platform — ensuring leadership visibility, monitoring, and reporting at every level.

9. Conclusion

“Tone at the Top” is not a compliance slogan — it's the starting point of organisational ethics. When leadership leads with integrity, the rest of the organisation follows.

At Crest Advisory Africa, we help turn that vision into a practical, standard-driven reality.