No Result
View All Result
SUBSCRIBE | NO FEES, NO PAYWALLS
MANAGE MY SUBSCRIPTION
NEWSLETTER
Corporate Compliance Insights
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • Artificial Intelligence (AI)
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Downloads
    • Download Whitepapers & Reports
    • Download eBooks
  • Research
  • Books
    • CCI Press
    • New: Bribery Beyond Borders: The Story of the Foreign Corrupt Practices Act by Severin Wirz
    • CCI Press & Compliance Bookshelf
    • The Seven Elements Book Club
  • Podcasts
  • Webinars
  • Videos
  • Subscribe
Jump to a Section
  • At the Office
    • Ethics
    • HR Compliance
    • Leadership & Career
    • Well-Being at Work
  • Compliance & Risk
    • Compliance
    • FCPA
    • Fraud
    • Risk
  • Finserv & Audit
    • Financial Services
    • Internal Audit
  • Governance
    • ESG
    • Getting Governance Right
  • Infosec
    • Cybersecurity
    • Data Privacy
  • Opinion
    • Adam Balfour
    • Jim DeLoach
    • Mary Shirley
    • Yan Tougas
No Result
View All Result
Corporate Compliance Insights
Home Compliance

‘Why Didn’t Anyone Do Anything?’ Teaching Employees to Step In, Not Just Speak Up

The missing piece in most speak-up programs is active bystandership, empowering employees to intervene before harm occurs, not just report it after

by Jonathan Aronie
June 23, 2026
in Compliance
raising hand in meeting

Over three decades of internal investigations, Jonathan Aronie kept finding the same thing: Someone was almost always positioned to stop the misconduct before it happened and said nothing. The Sheppard Mullin partner and ABLE Project founder explains why reporting hotlines miss that moment entirely and what corporate compliance can borrow from drunken-driving campaigns, the airline cockpit and police training to capture it.

There we were, the general counsel of a Fortune 500 company (let’s call him Tom) and I having a drink in the now-shuttered Pegu Club in New York City. Together, we had just concluded a costly internal investigation into the actions of an employee who was, let’s just say, taking some liberties with his time-reporting obligations on a number of the company’s federal contracts. As Tom sipped his Manhattan, an exasperated look came over him. 

“We spend millions of dollars on compliance programs,” he said, “including a top-of-the-line reporting hotline. How come not one of the 10 employees who knew this was happening said or did a [expletive deleted] thing?”

Tom’s question is one asked by many. The answer, interestingly, for Tom at least, had nothing to do with the quality of his existing compliance program. He had top-tier internal controls. The answer, rather, was an essential element of an effective compliance program that he (like most of his peers) did not have: A meaningful active bystandership component. Had Tom’s employees been trained in the strategies and tactics of intervening in another employee’s conduct, our Pegu Club drink would have had a far different vibe.

The glaring gap in speak-up

American businesses are subject to a host of rules — statutes, regulations, ordinances — that govern the way they conduct their business. While these rules were enacted over the years to protect customers, employees, investors, third parties and the government itself, complying with the current US regulatory framework is a costly endeavor. One 2023 study estimated that US companies spend approximately $3 trillion annually in federal regulatory compliance. Companies operating in highly regulated industries (federal contracting, healthcare, banking) have it even worse. Economists haven’t even tried to estimate those compliance costs.

Against this background, spending money on a corporate compliance program is a must. The harm to an organization from a failure to comply with such a complex regulatory framework can be quite high. In the federal contracting space, for example, last year alone, the government recovered more than $6.8 billion from federal contractors and grantees for allegedly violating their legal obligations. For some companies, noncompliance can be corporate-life-ending.

Two unassailable conclusions can be drawn from these facts: (a)  the cost of corporate compliance is high; and (b) the cost of noncompliance is high.

To balance these two conclusions, organizations and institutions both large and small implement internal compliance programs that seek to balance effectiveness and fiscal responsibility. Such programs traditionally incorporate a range of internal controls, including policies, education, monitoring, technological protections, a reporting hotline and, of particular importance for our purposes here, a “speak up culture.”

A speak-up culture — or at least the appearance of one — has become a staple in most every functional large-organization compliance program in the US. According to the National Association of Corporate Directors, 82% of business organizations say they have a strong one. In my experience, however, (and I recognize this may be heresy to some), such programs have only marginal utility. While must-haves from a check-the-box perspective, most speak-up programs suffer from an inherent but curable flaw: The absence of a meaningful active bystandership component.

A traditional speak-up program generally has three elements: a reporting mechanism, an anti-retaliation policy and an investigation infrastructure. Organizations promoting a speak-up culture give their employees a host of channels through which to report their colleagues: Toll free numbers, email addresses, ethics officers, web portals and more. At their core, however, most speak-up programs suffer from two fundamental flaws:

  • They focus on post-conduct reporting (e.g., the harm already has occurred).
  • And they ask employees to do something most of us find very difficult: Tattle on someone.

A true active bystandership program, on the other hand, focuses on changing the trajectory of a situation before harm occurs. Active bystandership is not a reporting program, but rather an evidence-based initiative designed to educate and empower ordinary people (e.g., your employees) to intervene in a colleague’s behavior before harmful conduct takes place. Active bystandership does not replace a speak-up program, it supplements it. And, if implemented properly, it reduces the need to report misconduct because less misconduct will occur.

Opportunities for active bystandership abound

Thinking back to the hundreds of investigations I have conducted over the past three decades, I can count on one hand the number of situations not involving a bystander employee who had the opportunity to tap a colleague on the shoulder and stop the conduct that ultimately caused the harm. Indeed, some of my costly investigations (including Tom’s) could have been prevented if just one employee had the knowledge and ability (and the supporting culture) to simply say to a colleague, “Hey, let’s not do it that way.”

My personal experience is not unique. I’ve canvassed my Sheppard colleagues, and over the thousands of investigations in our admittedly informal sample, the result was the same. There almost always was someone who could have prevented the harm but didn’t take action. And to be clear, I’m not talking about blowing the corporate whistle. I recognize that is hard to do for many. I’m simply saying, in most cases there was one or more individuals who could have intervened in their colleague’s behavior but did not. In other words, they failed to be an active bystander.

These observations are not limited to corporations. A few years ago, Steven Hansen, the executive director of the Utah Local Government Trust (the largest insurance pool in Utah), and I studied a robust data set of insurance claims, and our findings were stark but not surprising.

For our study, we looked at five years of claims data from the Trust’s 227 customers. We analyzed the claims to identify situations where a second municipal employee, a “bystander,” was on the scene of the event that led to the claim and might have been in a position to prevent the liability-causing event. Our analysis identified 2,590 claims — 60% of the claims reviewed — that had bystander potential, resulting in a total loss to the insurance pool of $23.8 million over five years. The lost time for employees injured as a result of claims with bystandership potential was 52 lost (or under-performed) work years among Utah Trust members during the five-year review period.

I can’t say that a meaningful active bystandership program in Utah would have converted all those bystanders into active bystanders, or that, even if it did, their efforts always would have been successful. But it is highly likely that if those employees had been trained in the strategies and tactics of active bystandership, at least some of them would have acted to prevent the resulting harm.

Despite these widely shared observations — and countless general counsels and chief ethics and compliance officers across the country asking more often than they would like, “Why didn’t anyone just say, ‘don’t do that,’” few if any US companies have incorporated the principles of active bystandership into their compliance programs in any meaningful, holistic way.

dog poop bin
Leadership and Career

The Most Radical Act a Compliance Officer Can Do? Delete a Pointless Control

by Severin Wirz
June 22, 2026

Can AI help clean up the stench of sclerotic compliance?

Read moreDetails

The science behind active bystandership

The science of active bystandership is not new, although it may feel that way to some. Social scientists have been studying when and under what conditions ordinary people are willing to intervene in another’s conduct to prevent harm since shortly after the Holocaust. The four grandfathers of active bystandership research arguably are John Darley, Bibb Latané, Stanley Milgram and Ervin Staub, all renowned social scientists. Since the late 1960s, their research has demonstrated that intervention is rarely just a matter of personal morality or courage; instead, it is shaped by social norms, group dynamics, hierarchy, diffusion of responsibility and whether individuals feel both empowered and supported to act. Their work helped explain why ordinary people so often remain passive in the face of risk but also how we all can learn to take action before something irreparable occurs.

It is unclear whether these social science giants recognized that their work would lead to so many real-world applications 60 years later. But it did. Their decades of active bystandership study now serves as the foundation of countless harm-prevention initiatives from which corporate America could learn.

Friends Don’t Let Friends

Let’s start with drunken driving. By the mid-1970s, alcohol was involved in about 60% of all traffic fatalities, and by 1982, more than 20,000 people were dying each year in alcohol-related crashes in the US. Traditional intervention approaches did little to curb this public health crisis.

That changed in 1983 due to a three-part national intervention strategy: new laws, new enforcement and, importantly for our purposes, a new approach to conveying the “stop drunk driving” message. Specifically, 1983 marked the arrival of “Friends Don’t Let Friends Drive Drunk,” an advertising and marketing campaign etched into the memories of most everyone of a certain age.

The advent of the Friends campaign was no small change in intervention approach. Indeed, it was a seismic shift. Whereas the pre-Friends anti-drunken-driving message was directed at the driver (“don’t drive drunk”), the post-1982 message was directed at the bystander (“don’t let your friend drive drunk”). The campaign did not relieve the driver of his responsibility (I use the masculine pronoun intentionally here because men are far more likely to be involved in alcohol-related crashes than women); it highlighted the opportunity (and responsibility) others have to step in when the judgement of the one primarily responsible for the conduct is, well, impaired.

The Friends campaign was an unquestionable success. Between 1982 and 1992, the number of alcohol-related traffic deaths in the US fell from more than 26,000 to just over 17,000, a decline of more than 30%. 

The Friends campaign, of course, cannot claim sole credit for this drop; remember, there were legal and enforcement changes at the same time. But most observers recognize that the fundamental change in the audience for the message (from the perpetrator to the bystander) played a significant role in the success of the campaign.

The Tenerife Airport disaster

The Friends campaign was the first national experiment in the US in “active bystandership” aimed at ordinary people (that is, people like you and me). But it was not the first real-world application of active bystandership as a risk-reducing tool. Years before, NASA and other leading thinkers in the aviation industry demonstrated the power active bystandership can play in reducing airline fatalities. These efforts were driven by a number of tragic aircraft events, including, perhaps most notably, the crash of two 747s in the Canary Islands.

With a total of 583 fatalities, the Tenerife Airport disaster, as it is called, remains the deadliest accident in aviation history. All 248 passengers and crew aboard one flight were killed, and there were 335 fatalities and 61 survivors on the second flight. Of the several causes identified by the post-crash investigation, the following is notable for our purposes: Crew members did not “question the captain’s actions due to his senior position within the company.” In other words, active bystandership was not in their lexicon.

Following the Tenerife Airport disaster and other actual or near-tragedies the aviation industry began incorporating active bystandership as a core component of a new initiative called crew resource management, or CRM. CRM sought to reduce accidents caused by silence, deference and breakdowns in cockpit communication by empowering copilots and other crew members to challenge unsafe decisions before catastrophe occurred.

Doctors, nurses, students, soldiers & officers

More recently, active bystandership has found its way into a growing number of industries, institutions and social settings. Medical schools and nursing programs teach it to empower nurses, residents and other healthcare professionals to intervene before a significant medical error occurs. Colleges, universities and the military use active bystandership training to help prevent sexual assault. And law enforcement agencies increasingly incorporate active bystandership into both recruit and veteran officer training through programs, such as HEROES and the ABLE Project. In fact, at the time of this writing, more than 450 law enforcement agencies, employing tens of thousands of officers, have signed on to be a part of ABLE.

A missed opportunity

With such a wide range of active bystandership successes, why is corporate America so loath to fill this gap in their speak-up programs? I have a few theories.

  • Present bias. Behavioral economists are aware of an interesting trick our minds play on us. Humans notoriously underweight the benefit or pain of future events. Consequently, to corporate decision-makers charged with the allocation of scarce resources, the present cost of implementing a new risk-reduction program seems high compared to the future benefit of avoiding a costly fine, penalty or lawsuit that may or may not materialize. (Interestingly, the same cognitive bias explains why gym memberships go up in January and are followed by a flood of cancellations in March; and why US consumers have amassed more than $1.28 trillion in credit card debt.)
  • Misunderstanding. If you ask a roomful of C-suite executives whether their organizations incorporate active bystandership, many will nod in the affirmative. The truth, however, is that most are confusing a reporting program with an active bystandership program. For the reasons discussed above, the two initiatives are markedly different (and, I would argue, generate markedly different results). Relatedly, without proper communication, an active bystandership program can sound like just another culture change program. While it is not, the confusion is understandable.
  • Training fatigue. Let’s be honest here. Employees are drowning in training, or at least they feel like they are. We have HR training, sensitivity training, cybersecurity training, focused regulatory compliance training; not to mention the substantive training we all need to perform at the high levels our customers and clients expect. Adding another training element into the mix, especially one where the payback is something that doesn’t happen, takes a very forward-thinking management team.
  • Fear. When my NOPD colleagues and I first introduced active bystandership to law enforcement beyond New Orleans in 2017, the initial reaction of many police executives was resistance. The idea of a peer, let alone a subordinate, questioning their authority was a bit too much for some to bear. This is an unsurprising human response. The fear that encouraging employees to intervene in another’s actions could lead to slower decision-making, employee conflict and management discomfort are rational concerns. But they are not realistic concerns.
  • Difficulty measuring ROI. We all know the adage, “we manage what we measure.” But it’s hard to measure something that does not happen. A good friend and mentor of mine in New Orleans, Ted Quant, puts it this way: “Active bystandership creates stories that will never be told because nothing happened.” Ted is right. But a difficulty measuring ROI does not mean there is no ROI. 
  • Time. A hotline is simple. Get a phone number, set up a mailbox, hire an answering service and you’re off to the self-reporting races. Standing up a meaningful active bystandership program, in contrast, takes time. It requires thought, coordination, communication and discipline. Since the payoff from this effort often is not immediate, many corporate leaders find it hard to justify the time it takes to do the job right.

Social scientists use the term “inhibitors” to describe the psychological roadblocks that prevent ordinary people from intervening in another’s conduct: fear of embarrassment, deference to authority, uncertainty, diffusion of responsibility and the hope that someone else will act instead. Organizations, as the foregoing list suggests, face their own inhibitors when deciding whether to implement a meaningful active bystandership program. These obstacles, however, are more perceived than real. The medical profession, the airline industry, colleges and universities, the military and law enforcement have been doing this for years. And none of those institutions have paid an insurmountable price for their open-mindedness.

Path forward

In my experience, active bystandership marks one of the greatest gaps in corporate compliance. It also presents one of the greatest opportunities. But it is an opportunity that, to be realized, must be implemented thoughtfully, holistically and deliberately. Here are the hallmarks (in my experience) of a meaningful active bystander program implementation:

Communication. Because active bystandership can easily be confused with a speak-up or reporting program, communication is key. Leaders should be engaged early, and employees should be acclimated to the program and philosophy before training begins.

  • Policy. It is said that culture eats policy for lunch (or breakfast). But that doesn’t mean that policies are not an important tool to drive behavioral change. A robust active bystandership program will have a written policy that (i) explains what active bystandership is, (ii) when and how to use the skill and (iii) assurance that good-faith active bystanders will not be retaliated against whether or not their efforts prove successful.
  • Training. Unlike many compliance initiatives, active bystandership is a skill more than a philosophy; an opportunity more than a requirement. It is a tool that, when wielded effectively, will prevent harm. But it also is a tool that requires training. 
  • No retaliation. While the strategies and tactics of active bystandership are not mastered overnight, a single instance of retaliation against a good-faith active bystander will spread like wildfire across an organization. Accordingly, a robust anti-retaliation policy and culture is critical to ensure would-be active bystanders are not inhibited from doing what they otherwise would be willing to do.
  • Pageantry. When my law firm moved to a new document management system a few years ago, our IT department wrapped the roll-out in quite a bit of pomp and circumstance. There were “System XYZ 3.0 is coming!” messages. There were stickers on the computers of those who had been upgraded. There were even prizes for those who were trained first. There was purpose behind the noise. The manner of the roll-out helped highlight that this was not business as usual. For most organizations, active bystandership is not business as usual, and in my experience, organizations that promote it as something greater than what has come before will experience a quicker adoption rate than those that merely add it to an already long training list. Longtime CEO Bill McDermott calls this “leveraging the power of pageantry to inspire people.” A company-wide active bystandership program, when done right, warrants a little pageantry.

None of these steps is overly complicated or even overly expensive, but, collectively, they certainly require more effort than writing a code of conduct, reading a training PowerPoint or standing up a hotline. I have become convinced over my decade-plus studying active bystandership that the time, effort and cost will be repaid many times over.

Conclusion

I can recall precious few significant investigations I have handled over the years where a bystander (i.e., another employee) was not in a position to prevent (or at least mitigate) noncompliant conduct. How different things might have been for those companies if just one employee had the knowledge, skill and willingness to tap a colleague on the shoulder and simply say, “Hey, let’s try it a different way?” It certainly would have led to a different outcome for Tom. Had even one employee at his company done so, I suspect his Pegu Club Manhattan would have gone down a lot smoother.

Tags: Corporate CultureInternal Investigation
Previous Post

Put Behavior on the Scorecard

Jonathan Aronie

Jonathan Aronie

Jonathan Aronie is a partner at global law firm Sheppard, the former leader of the firm’s governmental practice, and the current leader of the firm’s organizational integrity group. A graduate of Duke University School of Law, Jonathan has conducted hundreds of internal investigations over his 30-plus years as an attorney. In 2013, as an outgrowth of his investigations practice, he was appointed as the monitor over the New Orleans Police Department consent decree by the US District Court in Louisiana, serving in that role through the decree’s successful conclusion in 2025. Jonathan also is the co-founder and pro bono chair of the ABLE Project at the Georgetown University Law Center.

Related Posts

golf scorecard

Put Behavior on the Scorecard

by Jaqueline Oliveira-Cella
June 23, 2026

Treating behavior as a tracked, consequential input to performance turns values from wallpaper into something leaders are held to

dog poop bin

The Most Radical Act a Compliance Officer Can Do? Delete a Pointless Control

by Severin Wirz
June 22, 2026

Can AI help clean up the stench of sclerotic compliance?

robot and human coworkers

Meet Your New Colleague. It’s Already Making Decisions.

by Matt Galvin
June 17, 2026

Agentic AI is already making decisions inside many enterprises — approving transactions, sending communications, executing multi-step workflows — and the...

Bull in field

Is My Job Bullshit? Why AI Might Actually Have the Answer

by Anne DeTraglia
June 15, 2026

Five human skills to counterbalance the five “bullshit jobs” categories, if those exist

No Result
View All Result

Privacy Policy | AI Policy

Founded in 2010, CCI is the web’s premier global independent news source for compliance, ethics, risk and information security. 

Got a news tip? Get in touch. Want a weekly round-up in your inbox? Sign up for free. No subscription fees, no paywalls. 

Follow Us

Browse Topics:

  • CCI Press
  • Compliance
  • Compliance Podcasts
  • Cybersecurity
  • Data Privacy
  • eBooks Published by CCI
  • Ethics
  • FCPA
  • Featured
  • Financial Services
  • Fraud
  • Governance
  • GRC Vendor News
  • HR Compliance
  • Internal Audit
  • Leadership and Career
  • On Demand Webinars
  • Opinion
  • Research
  • Resource Library
  • Risk
  • Uncategorized
  • Videos
  • Webinars
  • Well-Being
  • Whitepapers

© 2026 Corporate Compliance Insights

Welcome to CCI. This site uses cookies. Please click OK to accept. Privacy Policy
Cookie settingsACCEPT
Manage consent

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
CookieDurationDescription
cookielawinfo-checbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
SAVE & ACCEPT
No Result
View All Result
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Explore Topics
    • See All Articles
    • Compliance
    • Ethics
    • Risk
    • Artificial Intelligence (AI)
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Well-Being at Work
    • Leadership and Career
    • Opinion
  • Vendor News
  • Downloads
    • Download Whitepapers & Reports
    • Download eBooks
  • Research
  • Books
    • CCI Press
    • New: Bribery Beyond Borders: The Story of the Foreign Corrupt Practices Act by Severin Wirz
    • CCI Press & Compliance Bookshelf
    • The Seven Elements Book Club
  • Podcasts
  • Webinars
  • Videos
  • Subscribe

© 2026 Corporate Compliance Insights