If you diagnose a behaviour problem as a knowledge problem, you will keep investing in solutions that don't work. More e-learning modules. More policy reminders. More town halls about values. And you will keep getting the same outcomes.

Soft controls are not informal because they are optional.
They are informal because they are human. They are embedded in how leaders lead, how teams interact, and how systems reinforce priorities. And because of that, they are often among the strongest predictors of risk.