Top-Level Commitment: The Board Must Be Able to Prove It

In the T.R.U.S.T. principles for Adequate Procedures, every letter matters. Yet in practice, one principle determines whether the other four gain traction: Top-Level Commitment.

A useful way to view it is through the 80/20 lens. When top-level commitment is genuine, the organisation has the authority, resources and discipline to assess risk, implement controls, review performance and communicate expectations. When it is absent, the remaining principles become a difficult compliance exercise—fragmented, reactive and difficult to defend.

Top-Level Commitment is therefore not a statement on a website, a signed policy or an annual message from the chair. It is a governance system that enables leaders to see, challenge and act.

What the guidance requires

Malaysia’s Guidelines on Adequate Procedures place responsibility on top-level management to ensure that the organisation:

• practises the highest level of integrity and ethics;
• complies with applicable anti-corruption laws and regulatory requirements;
• effectively manages its key corruption risks; and
• can provide assurance to stakeholders that it is operating in line with its policies and applicable requirements.

Those responsibilities move the board’s question beyond, “Do we have policies?”

The better question is:

Can we demonstrate that our anti-corruption programme is being implemented and is operating effectively?

The board has two things to prove

1. Adequate Procedures implementation

Are the T.R.U.S.T. principles translated into owned processes, controls, decisions, evidence and follow-through?

2. Operational effectiveness

Are the anti-corruption programme and its controls producing the intended behaviour, risk response and governance outcomes?

Past audit results alone are not enough. They are valuable, but inherently backward-looking. Boards also need forward-looking information: emerging corruption risks, unresolved actions, repeat failures, weak controls, conduct signals and the capability of the functions providing assurance.

A practical lens

VisionEthics evaluates Top-Level Commitment through existence and implementation of anti-corruption measures, alongside monitoring outcome.

Evidence of Board charters, policies and governance documents clearly assign responsibility for Adequate Procedures and anti-corruption oversight. Correspondingly, Board and committee records show real deliberation on risk, programme effectiveness, whistleblowing cases, enforcement, remediation, resources and the performance of assurance functions.

Anti-corruption Programmes need to be monitored and outcomes measured. Boards need to conduct periodic reviews on the Programmes alongside evaluating Board effectiveness on corruption prevention. Boards are also responsible for evaluating Auditors on their performance to provide assurance on Adequate Procedure Implementation.

Assurance must travel upward

A committed board establishes the framework through which evidence reaches it.

Management, risk, compliance and integrity functions report on implementation and operational performance. Internal audit provides independent assurance over whether that reporting and the underlying controls can be relied upon.

The result is not more reporting for its own sake. It is better decision-making.

When the board sees weaknesses, it can require remedial action. When cases occur, it can test enforcement. When controls are not addressing the real risk, it can redirect resources. When assurance capability is weak, it can strengthen it.

From tone at the top to proof from the top

Top-Level Commitment is effective when leadership consistently:

• sets the framework;
• enables the critical success factors;
• receives credible evidence; and
• acts on what that evidence reveals.

Tone matters. Proof matters more.

VisionEthics supports boards through its Effectiveness Indicators Assessment and Strategic Board Effectiveness Evaluation—two focused pathways for examining implementation, operational effectiveness, leadership capability and the quality of assurance reaching the board.

To discuss a confidential assessment, contact VisionEthics.

References

• Malaysian Anti-Corruption Commission: Section 17A official information
• Malaysian Anti-Corruption Commission: Section 17A and Guidelines on Adequate Procedures

Disclaimer: This article provides general information from a governance and implementation perspective. It does not constitute legal advice, a legal opinion, certification or independent assurance. Whether procedures are adequate depends on the organisation’s circumstances and supporting evidence.