The compliance function has an image problem that costs companies real money. Across most boardrooms, governance sits in the same mental category as insurance premiums and audit fees: a necessary drag, a tax on ambition, something the business tolerates rather than uses. Budget conversations treat it as overhead. Strategy conversations rarely include it. Teri Cotton Santos, a chief compliance officer and legal executive with more than two decades advising global companies in highly regulated industries, argues the premise is simply wrong, and that the companies still operating under it are handing an advantage to competitors who figured it out years ago. “When governance and risk are done right, they are not a brake on the business; they are an accelerator,” she says. That is not a defense of the function. It is a claim about where speed comes from, and it inverts the standard logic that every layer of oversight buys safety at the price of momentum.
Governance Removes The Ambiguity That Slows Companies Down
The usual diagnosis of a slow organization points at process. Too many approvals, too many committees, too many sign-offs between an idea and a decision. Cotton Santos locates the problem somewhere else entirely. “Ambiguity is what slows organizations down, not oversight,” she says. The distinction matters because it changes what leaders should fix. Stripping out controls to move faster, the reflex of almost every growth-stage company under pressure, often makes the problem worse. What remains is not a leaner decision path but a vaguer one, where nobody is certain who owns the call or what happens if it goes badly.
Clear governance structures resolve that uncertainty before it becomes a bottleneck. “When governance structures are clear, leaders can move faster and with greater confidence,” Cotton Santos says. “They know who owns what, how decisions are made, and where the guardrails are.” Read that carefully and it describes something closer to an operating system than a rulebook. A leader who knows the boundaries of their authority doesn’t need to escalate, hedge, or spend two weeks building consensus for a decision that was always theirs to make. The cost of weak governance is not measured in fines. It is measured in the hesitation of capable executives who are not sure whether they are allowed to act, and in the decisions that get deferred because nobody wants to own an outcome in a system where ownership was never defined. “Strong governance removes that ambiguity and allows leadership teams to execute with clarity and speed,” Cotton Santos says.
Risk Assessment Is Either A Strategic Tool Or A Wasted Exercise
Most organizations run risk assessments. Far fewer use them. The process gets delegated down, completed on schedule, filed, and referenced again only when something has already gone wrong. Cotton Santos draws a hard line between that version and the one that produces commercial returns. Companies that treat risk assessment as “a strategic tool rather than a checkbox exercise,” she says, “are consistently better at protecting margins, retaining partners, and navigating regulatory change.” Those three outcomes are worth separating, because none of them is a compliance metric. They are commercial measures: margin, relationships, and adaptability, all of which show up in enterprise value.
The mechanism underneath is optionality. “Knowing your risk landscape gives you options,” Cotton Santos says. “Ignoring it takes them away.” A company that has mapped its exposure can choose when and how to respond, can price the exposure into a deal, can restructure a supplier relationship on its own timeline, can prepare for a regulatory shift while competitors are still reading the final rule. A company that has not mapped it responds to events on someone else’s schedule and at someone else’s price. “Companies that identify and address risk proactively are better positioned than those that react to crises,” Cotton Santos says. The gap between those two postures is not primarily about avoiding disaster. It is about who gets to set terms. By the time a risk becomes a crisis, the menu of available responses has already collapsed to the expensive ones.
Integrity Shows Up In The Numbers, Not Just The Values Statement
The case for ethical conduct is usually made on moral grounds, which is precisely why it tends to lose when it collides with a quarterly target. Cotton Santos makes the financial case instead. A strong governance and compliance culture, she says, “reduces the likelihood of costly investigations, regulatory penalties, and reputational damage that erode shareholder value.” Each of those is a line item. Investigations consume executive attention and legal spend for years. Penalties hit the balance sheet directly. Reputational damage degrades pricing power and raises the cost of every future partnership negotiation. None of this is abstract, and none of it is cheap.
What has changed is the scrutiny. “Investors, customers, and talent are all paying attention to how companies conduct themselves,” Cotton Santos says. Three distinct audiences, each with the power to reprice a business. Capital gets more expensive when governance looks loose. Enterprise customers increasingly run diligence on their suppliers’ conduct before signing. Senior talent, the kind with options, reads the record before accepting an offer. A credible compliance culture, in Cotton Santos’s framing, “signals that the organization is built to last,” which is a signal with a market value attached to it. Her conclusion is deliberately unsentimental: “Leading with integrity is not just the right thing to do, it is a performance strategy.” The companies that keep filing governance under cost control are not being disciplined. They are mispricing an asset, and the correction tends to arrive all at once.
Follow Teri Cotton Santos on LinkedIn for more insights on governance, risk management, and compliance strategy.
