The Justice Department’s Evaluation of Corporate Compliance Programs document, which was released in February, drove home the concept of operationalized compliance. It asked a series of questions designed to determine how well a company had moved compliance into the very fabric of its organization. This document followed a series of Justice Department pronouncements that emphasized whether a compliance program was effective—not only must an organization be doing compliance, but it must also be testing how well it is working, integrating that information back into the compliance program itself, and documenting it.

Thomas Fox has practiced law for over 40 years. Tom writes the daily award-winning blog, the FCPA Compliance and Ethics blog and founded the Compliance Podcast Network. Tom leads the discussion on AI in...