A corporate culture with strong values is integral to governance, risk, and compliance (GRC) programs — and therefore to the entire company. This report explains how significantly culture affects risk and compliance efforts; it also highlights five best practices to help risk and compliance pros encourage employees' ethical behavior, strengthen GRC programs, and enhance corporate performance. This is an update of a previously published report; Forrester reviews and revises it periodically for continued relevance and accuracy.