Well-run ethics and compliance programs have a strange problem: success looks like nothing happening. Rules get followed. Culture takes hold. Problems get caught and corrected before they ever reach a regulator’s desk or a headline. That is exactly what the program is supposed to do, and it leaves almost nothing to point to as proof.
You cannot hand a board, a regulator, or an outside reviewer a binder of disasters that never occurred. Yet proof is exactly what gets asked of ethics and compliance teams. Budget requests need it. Board reporting needs it. And Ethisphere’s World’s Most Ethical Companies® recognition asks for it directly, in the form of documentation submitted alongside the Ethics Quotient® survey.
That is where a training gap shows up, and it has nothing to do with the substance of the program. Compliance teams train the organization on the code of conduct, on speak-up channels, on conflicts of interest. Far fewer train their own people, or their colleagues across the business, on how to capture and preserve evidence that any of it happened. A program can run well for years without anyone saving proof of it along the way. Then a reviewer asks for the file, and the team spends weeks reconstructing a year of work from memory and old email threads.
The Gap Reviewers Keep Finding
Erica Salmon Byrne, Chief Strategy Officer and Executive Chair at Ethisphere, reviews thousands of these applications every cycle. The pattern she describes is rarely a weak program. It is weak evidence of a strong one. “Every year, I hope to see fewer and fewer applications that clearly have not engaged with our documents,” she said on a recent episode of the Ethicast. Too often, she said, applicants “kitchen sink it,” dropping in whatever is on hand instead of the specific examples reviewers ask for, because nobody on the team sat down with the guidance on what good documentation looks like.
Reviewers are usually looking at a program that works, assembled by a team nobody trained to prove it.
A Binder Is Not Evidence
There is a real difference between a policy and proof that the policy lives inside the organization. Pete Blumberg, Chief Compliance Officer at FedEx, put it plainly: “Send us your policy. Send us your guidelines. Send us your alert line stats. When you have to actually document what you are claiming in a very thorough way, that’s when the rubber meets the road.”
The seven elements of an effective compliance program, from written standards to auditing and monitoring, describe what a program should include. They say nothing about whether employees can find the code of conduct, whether managers hold the integrity conversations the training promises they will, or whether an investigation’s findings change anything downstream. More than 75% of Honorees now share investigation statistics with employees on a quarterly or annual basis, and 51% now require managers to hold regular integrity conversations with their teams. Those figures exist because someone tracked them on purpose, as the work happened, not because a policy said they should.
That is a training question before it is a documentation one. Does anyone on the team know they are supposed to be capturing that number in the first place?
Evidence Lives Everywhere but Your Desk
The hardest part of documenting a program is that compliance rarely holds the best evidence of it. This cycle’s World’s Most Ethical Companies application asks for documentation across 17 categories, spanning board oversight, third-party risk, investigations, and more. The person who can prove the board is trained on its oversight duties is probably the corporate secretary. The person who can prove third-party screening works is probably in procurement. Compliance owns the program. Compliance rarely owns the file cabinet.
Training a team to document a program well means training people outside the compliance function to save their own evidence as they create it. The communications team archives the campaign it sent, not a cleaned-up version made for a file. The learning team keeps completion records broken out by business unit instead of one organization-wide total. Whoever owns the board skills matrix updates it on a schedule, not the week someone asks for it. None of that happens on its own, and none of it happens the week before a deadline if it was not already built into how the work gets done all year.
What Strong Applications Have in Common
Across applications that score well, a few habits show up again and again.
Specificity. Reviewers ask for a handful of your best examples, not every policy the organization has ever produced. Merging your conflicts of interest policy, your gifts and entertainment policy, and your travel policy into one file to get around a page limit does not help your case. It just makes a reviewer wonder whether an employee could ever find any of them.
Narrative, used sparingly. Ethisphere’s own guidance treats supplemental narrative as optional context, not extra credit. Use it to explain a policy that is three months into rollout. Skip it everywhere else. A document that already speaks for itself does not need a cover letter.
Proof over performance. The files that score best are the ones a company already had on hand because it needed them, not the ones built for the reviewer. Redact what is genuinely sensitive, and nothing more. A page of black boxes tells a reviewer nothing except that they cannot evaluate what they are looking at.
Closing the Gap before the Window Closes
For organizations planning to apply for the 2027 World’s Most Ethical Companies recognition, a few moves close most of the gap quickly.
Assign one owner per documentation category now, not in October. Ask each owner what they would show a reviewer today, not what they could produce with three weeks of notice. Pull the version of a document an employee sees, not a version built for the application. Then keep the habit past this cycle. A program that trains itself to document as it goes never has to reconstruct a year of work under deadline pressure again.
The application window for the 2027 World’s Most Ethical Companies recognition closes October 29, 2026, at 8:00 p.m. EDT. Apply now, and give your program the chance to prove, in its own words and its own files, exactly how seriously your organization takes business integrity.