An easy solution to this is to give the legal,audit and compliance staff guaranteed contracts that protect them against retaliation for enforcing the code including bringing vilolations to the board and regulators if needed.