It was a quiet morning last week when the phone rang. I answered.

“Hey, it’s me!” said the voice on the other end of the line. He was one of my spies in the nonprofit world, the head of internal audit at a nationally known charity—a group that holds fund-raising walks all the time, and is no stranger to the occasional bout of bad publicity. “You guys need to write more ethics and compliance stuff for us on the charity side!”