Plea bargaining has returned to the center of the news in recent weeks with the case of Banco Master and Daniel Vorcaro. The instrument is not new, but whenever it reappears, it reignites an important debate about individual responsibility and collaboration with authorities. For me, it brought back memories of when I closely followed the journey of a whistleblower and led, on the other side, the company’s journey with leniency.
From a technical point of view, whistleblowing is a mechanism aimed at individuals. It is the agreement signed by individuals who, by collaborating in investigations, can obtain legal benefits in exchange for relevant information. In the corporate world, the leniency agreement is an equivalent instrument, although with a different nature. If whistleblowing deals with the liability of the natural person, leniency deals with the liability of the legal entity. It is the path by which companies recognize failures, collaborate with investigations and seek to mitigate legal, regulatory and reputational consequences.
This distinction is known at the conceptual level. What rarely enters the discussion is what happens within the company when this process stops being theory and becomes reality. And anyone who has gone through a critical process of integrity crisis within the company knows that there is a point at which compliance stops being an area and becomes the entire company.
Continues after advertising
The crisis that the organization is going through
This turning point does not happen gradually. He imposes himself. After all, no crisis asks for permission.
While the discussion remains in the legal field, the tendency is to treat whistleblowing and leniency as technical instruments, each with its specific function. Leniency, however, is an institutional collaboration, requires the adoption of corrective measures for various corporate processes and affects the entire company before, during and after the agreement is signed. What begins as an activity conducted under lock and key by the legal department due to confidentiality, quickly turns into a phenomenon that permeates the entire organization.
When the company enters into this type of process, the operating logic of the business becomes broadly impacted. Decisions that previously followed defined flows now require constant validation, and behaviors are no longer just operational but also assume legal and reputational implications. The organization stops operating exclusively with its current routine and starts mobilizing efforts to retrieve, organize and update information that supports its dialogue with authorities. This movement, in practice, is often hampered by system changes, staff turnover or lack of structured documentation.
Continues after advertising
More than that, organizational time itself changes. The company begins to operate under two simultaneous pressures that are difficult to balance: the urgency of responding to external developments and the need to preserve the survival of the business. Solving quickly is no longer enough. It is necessary, in addition to speed, to resolve with impartiality, rigor, coherence and the ability to sustain the position over time.
The crisis is no longer just a liability to be managed. It starts to demand a response capable of rebuilding trust, internally and externally, demonstrating that, although the facts cannot be changed, the way the organization responds to them is what effectively starts to define it.
From responding to the crisis to generating value
The whistleblower reveals facts, responsibilities and dynamics of irregularities that need to be known from the authorities’ perspective. This often triggers parallel moves to negotiate leniency agreements. However, neither whistleblowing nor leniency are capable of showing what happens within an organization while such a process unfolds.
Continues after advertising
The leniency agreement, in itself, does not show the internal reorganization to deal with the negotiations or the authorities’ demands for the agreement to be signed. It does not show the effort to rebuild trust between areas, between employees and leaders, between the company and the market (current and new customers). Nor does it highlight the route adjustments that need to be made in real time, often without clear precedents or predetermined parameters for interpretation by authorities.
It is precisely in this dimension, less visible and little publicized, that compliance materializes, supported by a consistent governance and risk management structure. Not just as a formal department, but as the company’s practical ability to sustain decisions under pressure, with consistency between what is done, what is communicated and what is intended to be reconstructed.
Many say that there is compliance for love and compliance for pain. But there are also times when compliance stops being a set of policies and becomes the only tool that separates the company from collapse. These are rare moments. Little described outside the records, official communiqués or crisis narratives that have already been resolved. But when this process has a robust governance and risk management structure along the way, the crisis response is capable of effectively generating value for the business.
Continues after advertising
Compliance that remains after the crisis
There is a natural tendency to look at integrity crises only through their formal frameworks: investigations, agreements, penalties and legal developments. These elements are relevant, but they do not capture what actually determines the future of the organization after the case is closed.
Corporate commitments after the signed agreement actually remain. However, what matters most is the structure built to support the journey up to this point and how it was inserted into corporate day-to-day life. This is because if the response to the crisis is limited to meeting formal requirements during the process, the closure of the case also usually marks the exhaustion of the transformation effort. The controls exist, the documents were produced, but the company’s operating logic remains essentially the same as before.
On the other hand, when the organization uses this path to review practices, strengthen its governance structure, risk management and compliance, and realign business values, the result is different. In these cases, compliance is no longer perceived as an imposed requirement and starts to be incorporated as part of the way of making decisions in that environment. The structure initially mobilized to respond to the crisis remains the basis to support the company’s new positioning, provide predictability to decisions and support the next business cycle.
Continues after advertising
Integrity crises are not just moments of exposing weaknesses. They are also moments of defining trajectory and values. What differentiates an organization that just survives from an organization that repositions itself after this crisis is the ability to transform response into structure and structure into consistency in the long term.
