Sam slyly, ceo of quick fix, has approached you to evaluate his corporate compliance program. He believes he's invested adequate resources, including dedicated staff, to develop and maintain the program. Despite these efforts, there continue to be more compliance failures in the organization than he is willing to tolerate. He goes on to explain that the program was built by a competent, mid-level manager and her documentation regarding the program was audited without exception by the Internal Audit department. He is less sure about how the program has been communicated and endorsed by either his senior or middle managers. What advice do you have about the significance of an appropriate tone-at-the-top and even tone-in-the middle