Is that good or bad? In any compliance function, you will find things that have been handled wrongly or are borderline cases. And compliance nowadays encourage

Is that good or bad? In any compliance function, you will find things that have been handled wrongly or are borderline cases. And compliance nowadays encourages to speak up and report, which also increases the number. There is also a range of reasons from semi-controllable (outside threats) to negligence (bugs) to misguided ambition to malice. What really matters is how this is handled. Do they act upon it quickly? Do they make sure it doesn’t happen again? Do they address systemic or cultural problems? Do they fulfil their legal reporting obligations (eg, GDPR)? Etc