BUILDING A RESILIENT COMPLIANCE PROGRAMME IN 2026

R&C: What defines resilience in a modern compliance programme?

Kenny: Modern compliance programmes that are resilient are adaptable to regulatory change. We work in a volatile regulatory environment, and it is important to have agile frameworks that can quickly incorporate or adapt to new laws, guidance and enforcement trends. They also involve integrated risk management that breaks down silos between functions such as legal, compliance, human resources and operations. These integrated functions then can drive integrated policies training and risk assessment. A modern compliance programme should also have a process for continuous monitoring and continuous improvement which seeks to evolve compliance in the context of a good understanding of risk maturity.

Wellens: Resilience in a modern compliance programme is defined by its capacity to anticipate risks, integrate compliance into daily operations, leverage data intelligently, respond swiftly to incidents and continuously improve – all anchored in a strong ethical culture. A resilient compliance programme is built on continually updated risk assessments. It adapts to changes in business models, regulatory expectations, geopolitical environments and technology. It also requires frequent programme effectiveness reviews, internal audits and benchmarking to continuously improve.

Jan-Mar 2026 Issue

Ethics and Compliance Switzerland

GSK

Siemens Energy