CSR Strategy & Leadership

Chapter 8
Organizational Culture, Change and Ethical Conduct

Diploma in CSR and Corporate Ethics
CSR Strategy & Leadership   •   Diploma

Organizational Culture, Change and Ethical Conduct

Introduction and Context

Corporate social responsibility (CSR) is not sustained by policies alone. It becomes credible when responsible behaviour is embedded in how an organization makes decisions, allocates resources, rewards performance and responds to difficult information. Organizational culture is therefore a central mechanism through which CSR strategy becomes everyday conduct.

Culture may be understood as the shared assumptions, values, norms and practices that influence how people interpret situations and behave. It is visible in formal documents, such as a code of conduct, but also in informal signals: who is promoted, which risks are tolerated, whether bad news is welcomed, and whether commercial targets override social and environmental commitments.

An ethical and sustainability-oriented culture does not mean that every employee thinks identically. It means that the organization has clear principles, legitimate authority, consistent systems and psychologically safe processes for making responsible decisions. This chapter explains how leaders can create such a culture through communication, training, codes, incentives, speak-up systems and change management. It also examines greenwashing and other forms of unethical organizational behaviour.

Learning Objectives

By the end of this chapter, learners should be able to:

  1. Explain the relationship between organizational culture, CSR strategy and ethical conduct.
  2. Distinguish ethical culture from compliance-only approaches.
  3. Design practical leadership communication, training, code-of-conduct and incentive mechanisms.
  4. Assess the strengths and limitations of speak-up and whistleblowing systems.
  5. Apply change-management principles to sustainability and ethics initiatives.
  6. Recognize greenwashing and propose controls against it.
  7. Evaluate an organizational ethics problem and recommend an implementation plan.

1. Culture as the Operating Environment of CSR

A strategy states what an organization intends to achieve; culture influences what actually happens when employees face time pressure, uncertainty or conflicting objectives. For example, a company may publicly commit to responsible sourcing while purchasing staff are informally rewarded almost exclusively for reducing price. The practical culture then communicates that cost is more important than labour conditions.

Culture has four related dimensions:

DimensionMeaningTypical evidence
ValuesPrinciples regarded as importantStatements about integrity, fairness or stewardship
NormsExpected patterns of behaviourHow colleagues respond to mistakes or concerns
PracticesRepeated ways of workingProcurement checks, safety routines and escalation processes
Underlying assumptionsOften-unspoken beliefs“Targets must be met at any cost” or “people may challenge decisions”

The visible elements of culture include office language, ceremonies, policies and reporting systems. Less visible elements include power relationships, historical experience and beliefs about success. A code may say that retaliation is prohibited, but employees will judge the culture by observing whether a manager who intimidates a complainant is disciplined.

Ethical culture and compliance culture

A compliance culture focuses on obeying external laws and internal rules. It is necessary, but insufficient. An ethical culture asks broader questions: Is the decision fair? Who may be harmed? Is the claim truthful? Would the organization defend the decision publicly? Compliance establishes a minimum boundary; ethics encourages responsible judgment beyond the minimum.

The two approaches can be compared as follows:

Compliance-oriented approachEthics-oriented approach
Emphasis on rules and avoidance of penaltiesEmphasis on values, judgment and stakeholder impact
Responsibility concentrated in legal or compliance departmentsResponsibility shared throughout the organization
Training often tests recallTraining develops reasoning and decision skills
Success measured by breaches detectedSuccess also measured by trust, learning and prevention
Often reactivePreventive and reflective

A mature CSR culture combines both. Clear rules are essential for high-risk conduct, while values and judgment are needed where rules do not anticipate every situation.

2. Frameworks for Understanding Ethical Culture

The “tone at the top” and “mood in the middle”

Senior leaders establish strategic priorities and allocate resources. Their words matter, but their decisions matter more. If an executive speaks about safety while approving unrealistic production schedules, employees receive a contradictory message. Middle managers are equally important because they translate organizational priorities into daily supervision. The resulting “mood in the middle” may reinforce or undermine executive intentions.

Effective leadership alignment requires consistency among:

  • what leaders say;
  • what leaders do;
  • what leaders measure;
  • what leaders reward; and
  • what leaders sanction.

The ethical infrastructure model

Ethical conduct is supported by an infrastructure consisting of formal and informal elements. Formal elements include a code, policies, training, audits, investigations and disciplinary procedures. Informal elements include leadership example, peer expectations, trust and psychological safety. Formal systems without trust may produce silence or superficial compliance. Informal commitment without formal controls may fail under pressure.

The “iron law” of incentives

People respond to what organizations consistently reward, tolerate and punish. Incentives do not mechanically determine behaviour, but they shape attention and perceived priorities. A sales employee whose bonus depends entirely on revenue may rationalize misleading claims. Conversely, a balanced performance system can make responsible conduct part of professional success.

Stakeholder and institutional perspectives

Stakeholder theory emphasizes that organizations have responsibilities to groups affected by their activities, including employees, communities, customers, suppliers, investors and the natural environment. Institutional theory highlights the influence of laws, professional standards, industry expectations and societal norms. These perspectives help explain why ethical culture is not merely an internal matter: external stakeholders can expose, challenge and reshape organizational behaviour.

3. Leadership Communication and Ethical Sense-Making

Leadership communication is more than distributing policy documents. It helps employees interpret ambiguous situations and understand why CSR matters. Communication should connect organizational purpose with concrete decisions.

A credible communication architecture includes:

  1. Purpose: Why does the organization exist, and what responsibilities follow from that purpose?
  2. Standards: What conduct is expected, prohibited or subject to escalation?
  3. Examples: How should employees respond to realistic dilemmas?
  4. Channels: Where can employees obtain advice or report concerns?
  5. Feedback: How will leaders learn whether messages are understood and trusted?

Communication should be audience-specific. A board may need information about material risks and oversight; a procurement team needs supplier-screening guidance; frontline workers need practical escalation instructions. Repetition is valuable, but repeated slogans cannot substitute for evidence of action.

Leaders should acknowledge trade-offs honestly. Sustainability decisions can involve cost, employment, access, innovation and environmental impact. Pretending that every initiative is costless undermines credibility. Ethical communication explains the decision process, recognizes uncertainty and identifies accountability for follow-up.

4. Codes of Conduct: Design and Implementation

A code of conduct translates values into expected behaviours. It should cover matters such as conflicts of interest, bribery and corruption, fair dealing, human rights, discrimination, health and safety, data protection, environmental responsibility, political activity, accurate records and reporting concerns.

An effective code has five qualities:

  • Clarity: It uses plain language and distinguishes mandatory requirements from guidance.
  • Relevance: It addresses the risks employees actually face.
  • Accessibility: It is available in appropriate languages and formats.
  • Operational connection: Policies, training, contracts and investigations reflect it.
  • Accountability: Consequences for violations are known and applied fairly.

A code should not be so detailed that employees cannot use it. It should include decision prompts, for example:

  • Is the action legal and consistent with organizational values?
  • Who could be affected, and have their interests been considered?
  • Would I be comfortable if the decision were publicly reported?
  • Have I disclosed relevant conflicts or uncertainty?
  • Should I seek advice before proceeding?

The board or governing body should oversee the code, while management should implement it. Periodic review is necessary because risks change with technology, markets, regulation and stakeholder expectations.

5. Training and Capability Development

Ethics training is effective when it changes practical capability rather than merely documenting attendance. A sound training cycle begins with a risk assessment. High-risk roles—such as sales, procurement, finance, research, human resources and environmental reporting—require role-specific scenarios.

Training methods may include:

  • dilemma-based workshops;
  • simulations and role plays;
  • brief digital modules followed by discussion;
  • manager coaching;
  • induction and refresher sessions; and
  • post-incident learning reviews.

Training should explain not only what is prohibited, but also how to recognize pressure, seek advice, document decisions and raise concerns. Managers require additional training because they influence workload, performance evaluations and responses to dissent.

Training effectiveness should be assessed at several levels: participation, knowledge, confidence, observed behaviour and organizational outcomes. Completion rates alone are weak evidence. A high completion rate combined with persistent retaliation or repeated reporting failures indicates that the program is not working as intended.

6. Incentives, Performance Management and Accountability

Performance systems communicate what the organization truly values. Sustainability and ethical conduct should be integrated into job expectations, appraisal processes and reward decisions where relevant to the role.

Good incentive design avoids two errors. The first is omission: ethical behaviour is described as important but never considered in evaluation. The second is crude quantification: a single target encourages gaming or neglect of unmeasured impacts. Balanced scorecards, qualitative review and manager judgment can complement quantitative indicators.

Examples of suitable indicators include:

  • completion and quality of supplier due diligence;
  • timely closure of corrective actions;
  • safety leadership and near-miss reporting;
  • accuracy and completeness of sustainability data;
  • respectful treatment of colleagues;
  • effective stakeholder engagement; and
  • quality of risk escalation.

Targets should be within the employee’s reasonable influence and should not encourage concealment. A manager should not be rewarded for reducing reported incidents if the reduction results from discouraging reporting. Boards should examine whether remuneration structures create incentives for excessive risk-taking or misleading external claims.

Accountability must be proportionate, consistent and procedurally fair. It should distinguish deliberate misconduct from good-faith error, while also addressing reckless disregard. Seniority must not provide immunity. Inconsistent discipline is itself a cultural risk because it teaches employees that rules apply selectively.

7. Speak-Up Systems and Psychological Safety

A speak-up system enables employees and other stakeholders to ask questions, seek advice and report suspected misconduct. It may include managers, ethics officers, hotlines, digital portals, ombudspersons and independent reporting channels.

A credible system requires:

  1. confidentiality or anonymity where legally and practically possible;
  2. multiple accessible channels;
  3. protection against retaliation;
  4. prompt, impartial investigation;
  5. defined case-handling and escalation procedures;
  6. feedback to the reporter where appropriate; and
  7. periodic reporting to senior governance bodies.

Whistleblowing is not evidence of organizational failure by itself. A healthy organization may receive concerns because employees trust the system. The more important questions are whether concerns are triaged appropriately, whether patterns are identified and whether reporters are protected.

Psychological safety means that people can raise questions, admit mistakes and challenge decisions without fear of humiliation or unjust punishment. It does not mean freedom from accountability. Rather, it supports learning and early intervention. Leaders can strengthen it by thanking employees for raising issues, separating investigation from retaliation, and discussing lessons without exposing confidential identities.

Useful indicators include reporting-channel awareness, time to acknowledge and resolve cases, substantiated-case patterns, retaliation allegations and employee survey results. These indicators must be interpreted cautiously: fewer reports may mean fewer problems, but may also indicate fear or lack of trust.

8. Managing Culture Change for CSR

CSR-related change may involve new environmental targets, human-rights due diligence, responsible procurement, revised reporting or changes to executive incentives. Change is difficult because it affects identity, power, routines and resources.

A practical change process contains the following stages:

Diagnose

Identify the gap between stated values and actual behaviour. Use interviews, surveys, document reviews, incident data, audits and stakeholder feedback. Avoid assuming that the problem is simply employee resistance; systems and leadership choices may be the cause.

Define the case for change

Explain the ethical, strategic, legal and stakeholder reasons for change. A credible case includes risks of inaction and recognizes legitimate concerns about workload, cost or capability.

Design and involve

Engage affected employees, worker representatives, suppliers and relevant experts. Participation improves the quality of design and helps identify unintended consequences.

Enable

Provide training, tools, authority, time and resources. Employees cannot be held responsible for standards they cannot reasonably meet.

Reinforce

Integrate the change into recruitment, induction, performance management, procurement, budgeting, audits and leadership reviews. Public commitments without reinforcement produce change fatigue and cynicism.

Learn and adapt

Monitor outcomes, investigate unexpected effects and revise implementation. Ethical change is not a one-time campaign; it is an iterative process.

A useful diagnostic distinguishes technical problems from adaptive challenges. A technical problem may be solved by a procedure or software tool. An adaptive challenge requires changes in beliefs, relationships or power—for example, persuading a dominant sales culture to value truthful customer advice. Treating an adaptive challenge as a technical one commonly leads to superficial compliance.

9. Greenwashing and Unethical Organizational Behaviour

Greenwashing occurs when environmental claims create a misleadingly positive impression about an organization, product or activity. It can involve false statements, selective disclosure, vague language, irrelevant claims, exaggerated benefits, misleading comparisons or the presentation of minor improvements while concealing significant harm.

Examples include describing a product as “eco-friendly” without a defined basis, highlighting recyclable packaging while ignoring high-impact production emissions, or claiming “net zero” without credible targets, boundaries, interim milestones and treatment of residual emissions.

Greenwashing is an ethical, governance and risk issue. It can mislead consumers and investors, disadvantage responsible competitors, undermine trust and expose the organization to regulatory or litigation risk. It may also distort internal decision-making if leaders believe their own unsupported claims.

Controls against greenwashing

Organizations should establish:

  • evidence requirements for every environmental claim;
  • clear definitions, boundaries and time periods;
  • review by legal, technical and sustainability specialists;
  • separation between marketing approval and evidence verification;
  • transparent disclosure of limitations and uncertainty;
  • assurance or independent review for material information; and
  • correction procedures when a claim is inaccurate.

A claim should be specific enough for a reasonable audience to understand what is being asserted and what evidence supports it. Absolute terms require especially strong justification. Carbon claims should distinguish reductions from offsets and should disclose the relevant emissions boundary and methodology.

Other unethical organizational behaviours include bribery, harassment, discrimination, falsifying records, retaliation, conflicts of interest, exploitative labour practices, unsafe production and manipulation of sustainability data. These behaviours often arise from the interaction of opportunity, pressure, rationalization and weak oversight. Prevention therefore requires both individual integrity and organizational controls.

10. Technology and AI in Ethical Culture

Digital tools can support training, case management, supplier screening, sustainability data collection and anomaly detection. Analytics may identify unusual purchasing patterns or inconsistent environmental figures. However, technology does not remove ethical responsibility.

AI systems can reproduce biased historical data, misclassify reports, expose confidential information or generate plausible but unsupported sustainability language. Organizations should define human oversight, data-access controls, audit trails, model testing and escalation procedures. An AI-generated environmental claim must be reviewed by a competent person with access to reliable evidence. Automation should strengthen accountability, not create an excuse for uncertain decisions.

11. Applied Case: Meridian Apparel’s Responsible Sourcing Transition

This is an illustrative case. Meridian Apparel, a fictional clothing retailer, publicly committed to responsible sourcing and lower supply-chain emissions. Its code prohibited forced labour and required accurate supplier information. However, buyers were rewarded mainly for reducing purchase prices and meeting delivery deadlines.

Background and problem

A confidential report alleged excessive overtime and recruitment-fee debt at a contracted factory. An internal review found that supplier audits had been announced in advance, workers had not been interviewed privately and several corrective actions had been repeatedly extended. Marketing materials described the collection as “sustainable,” although the claim referred only to a small proportion of recycled fibre and did not disclose labour risks or production impacts.

Analysis

The problem was cultural and systemic rather than a failure by one supplier alone. Meridian’s formal commitments conflicted with purchasing incentives. The audit process measured documentation more than worker experience. Employees feared that escalating concerns would damage commercial relationships. Marketing had no mandatory evidence review for broad environmental language.

Approach and solution

The board required management to create a cross-functional remediation plan. The plan included:

  • revising buyer incentives to include verified labour and environmental performance;
  • conducting unannounced, worker-centred assessments with independent specialists;
  • establishing a confidential multilingual reporting channel for workers;
  • creating a supplier remediation committee with escalation authority;
  • suspending unsupported “sustainable” claims pending evidence review;
  • publishing a measured explanation of the problem and corrective actions;
  • training buyers, managers and marketing staff using realistic scenarios; and
  • reporting progress quarterly to the board’s sustainability committee.

Meridian also recognized that immediate contract termination could harm workers by removing income without remediation. It therefore used a time-bound corrective-action approach, while reserving termination for serious or unremedied violations.

Outcome

After twelve months, worker reporting increased, corrective actions were closed more quickly and purchasing teams began considering labour conditions alongside price and delivery. The company withdrew several broad environmental claims and replaced them with narrower, evidenced statements. Some costs increased, and a supplier relationship ended after repeated failure to cooperate. The board concluded that increased reports were not necessarily deterioration; they reflected improved access and trust. Continued independent verification was required.

Learning points

  1. A code is ineffective when incentives contradict it.
  2. Audits require credible methods and worker voice.
  3. Greenwashing controls must operate before claims are published.
  4. Remediation should consider the interests of affected workers.
  5. Increased reporting can indicate a healthier speak-up culture.
  6. Board oversight is necessary when risks cross commercial, human-rights and reputational boundaries.

12. Implementation Checklist

A manager implementing this chapter’s principles can ask:

  • Are ethical and sustainability expectations specific to each high-risk role?
  • Do leadership decisions match public commitments?
  • Are performance targets creating hidden pressure to mislead or conceal?
  • Can employees and suppliers report concerns safely and accessibly?
  • Are investigations independent, timely and fair?
  • Are environmental claims evidence-based, specific and properly reviewed?
  • Are training outcomes assessed beyond attendance?
  • Does governance receive trend information rather than isolated case summaries?
  • Are corrective actions resourced, monitored and adapted?
  • Are technology and AI systems subject to human oversight and data protection?

Challenges and Limitations

Culture cannot be changed instantly through a campaign, code or workshop. Deeply embedded incentives and power relationships may resist reform. Ethical programs can also become symbolic if organizations focus on documents rather than behaviour. Measurement is difficult because trust, courage and judgment are partly qualitative. Reporting data may be misinterpreted, and employee surveys may be affected by fear or low participation.

Global organizations face differences in law, language, labour institutions and social expectations. A universal standard may be necessary, but implementation should remain sensitive to context without treating local custom as a justification for abuse. Finally, no system can eliminate misconduct. The objective is to reduce opportunity and pressure, increase early detection, respond fairly and continually improve.

Chapter Summary

An ethical and sustainability-oriented culture is created through consistent alignment between leadership behaviour, organizational values, systems and consequences. CSR strategy becomes credible when codes of conduct are practical, training develops judgment, incentives reward responsible performance, and speak-up systems protect those who raise concerns. Change management must diagnose cultural and structural barriers, involve affected stakeholders, provide resources and reinforce new practices. Greenwashing is prevented through specific claims, reliable evidence, transparent limitations and independent review. Technology and AI can support ethical governance but require human oversight. The Meridian case demonstrates that responsible sourcing depends on the interaction of purchasing incentives, worker voice, assurance, communication and board accountability.

Key Terms

Organizational culture: Shared assumptions, values, norms and practices that influence behaviour.

Ethical culture: An environment that supports responsible judgment and conduct beyond minimum compliance.

Compliance culture: An approach focused primarily on adherence to laws, rules and procedures.

Tone at the top: The ethical signals communicated by senior leaders through words and actions.

Mood in the middle: The way middle managers interpret and transmit organizational priorities.

Code of conduct: A document stating expected standards and prohibited behaviour.

Psychological safety: A belief that people can raise concerns or admit mistakes without unjust interpersonal punishment.

Speak-up system: Channels through which individuals seek advice or report concerns.

Whistleblowing: Reporting suspected wrongdoing to an internal or external recipient.

Retaliation: Punishment or disadvantage imposed because someone raised a concern or participated in an investigation.

Incentive alignment: Designing rewards and targets so they support, rather than undermine, ethical objectives.

Stakeholder: A person or group affected by, or able to affect, an organization.

Adaptive challenge: A problem requiring changes in values, relationships or behaviour, not merely a technical solution.

Greenwashing: Misleading communication that creates an exaggerated or false impression of environmental responsibility.

Due diligence: A structured process for identifying, preventing, mitigating and addressing risks.

Remediation: Action taken to correct harm or reduce its consequences.

Assurance: Independent or systematic evaluation of the reliability of information or processes.

Ethical infrastructure: Formal and informal systems that support ethical conduct.

Change reinforcement: Measures that embed new behaviour into systems, rewards and routines.

Review Questions

Short Answer Questions

  1. Why is culture important to the implementation of CSR strategy?
  2. Distinguish an ethical culture from a compliance culture.
  3. Identify four features of an effective code of conduct.
  4. What is psychological safety, and why does it matter for speak-up systems?
  5. Give two examples of controls against greenwashing.

Long Answer Questions

  1. Explain how leadership communication, incentives and sanctions jointly shape ethical culture.
  2. Discuss the design and implementation requirements of an effective speak-up system.
  3. Describe a change-management process for introducing human-rights due diligence into procurement.
  4. Explain why training attendance is an inadequate measure of ethics-program effectiveness.
  5. Analyze the relationship between formal ethical infrastructure and informal organizational norms.

Analytical / Application Questions

  1. A company rewards sales staff solely for revenue growth while publicly claiming that customer welfare is central. Diagnose the cultural risks and propose three corrective actions.
  2. An organization receives very few whistleblowing reports but has evidence of significant misconduct. What alternative explanations should leaders consider, and how should they test them?
  3. A marketing team wants to describe a product as “zero-impact” based on a small recycled-material component and purchased offsets. Evaluate the claim and design a compliant alternative communication approach.

Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes an ethical culture from a compliance culture?

A. An ethical culture eliminates the need for rules.

B. A compliance culture always produces better decisions.

C. An ethical culture supports values-based judgment beyond minimum legal requirements.

D. A compliance culture assigns responsibility to every stakeholder equally.

Correct Answer: C. An ethical culture supports values-based judgment beyond minimum legal requirements.

Question 2

Which leadership combination most strongly communicates ethical priorities?

A. Public speeches without changes to systems

B. Words, decisions, measurements, rewards and sanctions that are consistent

C. Strict discipline without employee consultation

D. Delegating all ethics matters to the legal department

Correct Answer: B. Words, decisions, measurements, rewards and sanctions that are consistent

Question 3

What is a central requirement of a credible speak-up system?

A. Only one reporting channel

B. Automatic punishment after every allegation

C. Protection against retaliation and impartial investigation

D. Public disclosure of every reporter’s identity

Correct Answer: C. Protection against retaliation and impartial investigation

Question 4

Why can a reduction in reported concerns be difficult to interpret?

A. Reports are never useful indicators.

B. It may reflect either fewer problems or reduced trust in reporting channels.

C. A reduction always proves ethical improvement.

D. Employees are legally prohibited from reporting concerns.

Correct Answer: B. It may reflect either fewer problems or reduced trust in reporting channels.

Question 5

Which practice is most likely to create greenwashing?

A. Defining the boundary and evidence for an environmental claim

B. Disclosing uncertainty and limitations

C. Using a broad positive environmental claim without supporting evidence

D. Obtaining independent assurance for material information

Correct Answer: C. Using a broad positive environmental claim without supporting evidence

Question 6

What is the main weakness of rewarding buyers only for lower prices?

A. It necessarily increases product quality.

B. It may encourage neglect of labour and environmental risks.

C. It prevents all supplier relationships.

D. It guarantees accurate sustainability reporting.

Correct Answer: B. It may encourage neglect of labour and environmental risks.

Question 7

An adaptive challenge differs from a technical problem because it primarily requires:

A. A new software application

B. A longer policy document

C. Changes in beliefs, relationships or behaviour

D. Elimination of all organizational discretion

Correct Answer: C. Changes in beliefs, relationships or behaviour

Question 8

Which is the best evidence that ethics training is effective?

A. The percentage of employees who clicked through a module

B. The number of pages in the training manual

C. Improved judgment, behaviour and organizational outcomes

D. The cost of the training program

Correct Answer: C. Improved judgment, behaviour and organizational outcomes

Question 9

Why should an organization avoid automatically terminating a supplier after a labour violation?

A. Violations are never serious.

B. Termination may harm affected workers if remediation is possible and appropriate.

C. Suppliers cannot be held accountable.

D. Contracts always prohibit termination.

Correct Answer: B. Termination may harm affected workers if remediation is possible and appropriate.

Question 10

What is a responsible approach to AI-generated sustainability claims?

A. Publish them without review because AI is neutral.

B. Use them only when they sound persuasive.

C. Require human review, reliable evidence, access controls and auditability.

D. Allow the marketing team to remove all limitations.

Correct Answer: C. Require human review, reliable evidence, access controls and auditability.

CSR Strategy & Leadership
Chapter 8 of 14