It takes a long time to build an ethical culture and a short time to lose it. Your policies, procedures, and controls should adapt to emerging risks as internal and external circumstances impact your business and risk profile.