Explaining the 'Regulatory Pendulum'

4 downloads 130 Views 284KB Size Report
Explaining the 'Regulatory Pendulum' in Financial Markets. 1 ..... Federal Deposit Insurance Corporation, Consumer Financial Protection Bureau, and state.
Forthcoming in Organization Science Drift and Adjustment in Organizational Rule Compliance: Explaining the 'Regulatory Pendulum' in Financial Markets 1 Ignacio J. Martinez-Moyano Decision and Information Sciences Division, Argonne National Laboratory 9700 South Cass Ave, Argonne, IL 60439 email: [email protected] Computation Institute, University of Chicago 5735 South Ellis Avenue, Chicago, IL 60637 email: [email protected] David P. McCaffrey University at Albany, SUNY Milne 317, 135 Western Avenue, Albany, New York 12222 email: [email protected] Rogelio Oliva Mays Business School, Texas A&M University College Station, TX 77843-4217 email: [email protected] Keywords: Rule Change, Rule Compliance, Internal and External Regulation, Standards Erosion, Complex Systems Analysis, Qualitative Analysis, Organizational Processes, Financial Markets

ACKNOWLEDGEMENTS The authors thank Organization Science editors William Ocasio and Daniel Levinthal for their insightful feedback and guidance. Additionally, the authors thank two anonymous reviewers for their very helpful comments and suggestions. This research was funded in part by NSF Grant CNS-0939137 and by the U.S. Department of Homeland Security.

1

This manuscript has been created in part by UChicago Argonne, LLC, Operator of Argonne National Laboratory (“Argonne”). Argonne, a U.S. Department of Energy Office of Science laboratory, is operated under Contract No. DE-AC0206CH11357. The U.S. Government retains for itself, and others acting on its behalf, a paid-up nonexclusive, irrevocable worldwide license in said article to reproduce, prepare derivative works, distribute copies to the public, and perform publicly and display publicly, by or on behalf of the Government.

1

Drift and Adjustment in Organizational Rule Compliance: Explaining the 'Regulatory Pendulum' in Financial Markets Abstract This article integrates research on rule development, compliance, and organizational change to model rule development and compliance in organizations, using causal-loop modeling from system dynamics to articulate explicitly a few key underlying processes. We focus on financial markets as a case area, suggesting that recurring regulatory problems in financial markets in the United States over the past 60 years, while differing in specifics, are structurally similar. At the heart of the model is the tension between production goals that focus on short-term, certain, salient benefits and required adherence to production-constraining rules that attempt to mitigate long-term, uncertain, and non-salient risks. It describes systemically how organizations attend to rules depending on the nature of the benefits of production compared to those of rule compliance. The model captures the operative mechanisms responsible for the development of pressures for production and for rule compliance in organizations, providing a structural explanation both for problem-prone organizations characterized by erosion of standards and increased violations and for organizations following rules more reliably. Drawing on studies of institutional work, we conclude by suggesting research on how agency, through strategic and tactical choice, potentially modifies structure in rule compliance.

INTRODUCTION All organizations produce output of some type, whether computers, air traffic control, medical services, processed applications, and an almost infinite variety of other objects and activities. Higher levels of production usually help organizations economically and politically, and high-performing producers earn greater incomes and prestige (Pfeffer 1994). However, incentive-driven individual producers who disregard the broader effects of their actions can cause problems ranging from failed coordination to catastrophic legal violations and accidents. Thus, organizations always have rules and procedures, however structured, governing production (Adler and Borys 1996). While producers might respect rules in principle, they tend to resist constraining rules more when facing high-volume and time pressures (Rudolph and Repenning 2002; Vardi and Weitz 2004). How organizations manage the tension between production pressures and rule compliance affects the quality of

2

service provided to their customers, patients, or clients, as individuals weigh completing tasks thoroughly versus taking shortcuts. It affects organizations’ frequency of accidents, as individuals balance safety procedures against faster completion of tasks. It affects their criminal and regulatory violations, as individuals consider bypassing controls to complete transactions that otherwise would be delayed or even not allowed at all (Ashforth et al. 2008; Oliva and Sterman 2001; Reason 1997; Vaughan 1999; Weick and Sutcliffe 2007). The tension between production and rule compliance is a fundamental topic for organizational science from the standpoint of both theory and practice. It has been difficult to measure through correlational analysis the effects of this tension because of the complexity of underlying relationships and challenges in operationalizing variables. These include, among other factors, the challenges of constructing statistical analyses that capture important but subtle interactions within organizations; of accounting for the effects of ongoing and shifting social construction of key variables, such as negotiations over what is or is not a rule violation in ambiguous cases; and recognizing the ways in which the institutional (e.g., industry and policy sector), organizational (e.g., specific firm), and individual (e.g., operators and managers) levels jointly shape rule compliance (Clinard et al. 1979; Hill et al. 1992; Keane 1993; McCaffrey et al. 1985; Parker and Nielsen 2009). This article complements and extends prior research on rule dynamics by using causal-loop modeling from system dynamics to articulate explicitly a few key underlying processes of rule development and compliance. System dynamics modeling is well-suited to exploring ongoing adjustments among variables in complex processes, including how levels of production pressures interact with rule development and rule compliance over time (Richardson 1991, 2001; Sterman 2000). The model developed here integrates research on rule development, compliance, and organizational change (March 2010; March et al. 2000; Parker and Nielsen 2011) with analysis of financial markets as a case area. It suggests that recurring regulatory problems in financial markets in the United States over the past 60 years, while differing in specifics, are structurally similar. Analyzing the structural drivers of behavior provides a model of drift and adjustment in rule dynamics that can be evaluated in light of regulatory and market patterns and that applies to settings beyond financial markets (Shapira 2011).

3

At the heart of the model is the tension between production goals that focus on short-term, certain, and salient benefits with required adherence to production-constraining rules that attempt to mitigate long-term, uncertain, and non-salient risks. It articulates relationships among producers, control systems within firms, and external regulators that commonly are discussed separately but not jointly and systemically, describing how incentives and social processes produce dysfunctional cycles of accumulating rule violations and compensating regulation, including development of new rules. Industry and regulatory participants and scholarly research in financial markets commonly refer to a “regulatory pendulum” but as a general metaphor (McCaffrey et al. 2007). We model the conditions, incentives, and behaviors actually leading to the outcome, operationalizing the feedback loops that interact to create the cycles of eroding compliance followed by strong compensatory regulatory responses. However, the model is not one of inherently failing systems. The simple set of interacting feedback processes provides a structural explanation both for problem-prone organizations characterized by erosion of standards and increased violations and for organizations following rules more reliably. We discuss how it applies to both situations. This work follows in the tradition of research in organizational learning and adaptation showing how organizational behavior arises from the interactions of physical and institutional structures with boundedly rational decision making, often leading to unintended and dysfunctional outcomes (Barnett and Hansen 1996; Forrester 1961; Levinthal and March 1981; Masuch 1985; Rasmussen 1997; Sastry 1997; Sterman et al. 2007; Sterman et al. 1997; Woo and Vicente 2003). The article is structured as follows. We first describe the financial industry context and then discuss the information used to study rule compliance within financial firms. Next we describe behavior within firms, their internal controls on rule compliance, and the resulting erosion of industry-wide standards generating crises. We then explore how external regulatory controls apply to firms and why these controls fail to avoid regulatory crises. We briefly consider why market controls and private litigation do not alter these patterns. The article concludes by discussing the model’s broader applicability to compliance dynamics, including situations in which rules are followed more reliably, and complementary research on the structural mechanisms

4

examined here drawn from scholarship on the institutionalization of work. INDUSTRY CONTEXT AND DATA Financial markets allocate funds among investors, firms, and other participants with different goals so that, ideally, they use the funds most efficiently to produce goods and services and manage financial risks. Research has shown that effective systems of rules and procedures are critical to successful financial markets because they give participants the confidence to enter transactions and stabilize expectations (Black 2002). Participants have to be willing to buy or sell assets that commonly are intangible or unobservable (e.g., stakes in distant businesses), at risk, and not insured. Investors hardly ever understand the transactions fully and so depend on the integrity of the financial firms facilitating transactions (Langevoort 1996; U.S. SEC Staff 2011). Financial regulation’s purpose is to assure market participants of these transactions’ reliability and integrity so they will continue to invest. The quality of United States financial markets rank highly in comparison with other nations. For example, the World Economic Forum rated U.S. banking and “non-banking” financial services, financial markets, and “financial access” 21st, first, first, and fifth, respectively, among 62 nations (World Economic Forum 2012: 14). Still, recurring significant problems in operational and legal controls occur in financial institutions. These problems include—among others—widespread breakdowns in securities firms’ financial controls in the 1960s and 1970s, concerns about insider trading beginning in the 1980s, and complaints about deceptive marketing of complex financial products beginning in the 1990s (Benn 2000; Das 2010; Stewart 1991; U.S. GAO 1997). One major banking crisis related to investment fraud occurred in the 1980s and another began in 2008, and in between came the bubble and collapse of internet stocks in the late 1990s and early 2000s (Black 2005; Bookstaber 2008; Financial Crisis Inquiry Commission 2011). Such events led to the Sarbanes-Oxley Act in 2002 and the Dodd-Frank Act in 2010 but new laws following financial crises are a longstanding pattern in United States history (Barth et al. 2012; U.S. GAO 2009). The timing and specifics of these problems vary but industry observers say that they form a pattern of cyclical lapses. One experienced attorney commented in 2003, just after passage of the Sarbanes-Oxley Act, that “the nature of change is cyclical. I’ve seen plenty of crises. It may be that

5

the pressures now are somewhat more intense than in other crises. You had a perfect storm developing in the Internet bubble. But…there are ebbs and flows to these things” (McCaffrey et al. 2007: 308). Similarly, a financial reporter wrote “In this world, risk management is applied retroactively … Unlike virtually any other industry, Wall Street shakes, twists, and hammers on its innovations until they break” (Berman 2007). Some analysts highlight how these disruptions are part of a process in which problems are recognized and corrected, establishing a foundation for continued positive development (Shiller 2012). In contrast, other analysts highlight ways in which financial markets’ technologies and structures facilitate continued crises and unbalanced political power, with problems likely becoming worse given greater complexity in finance and industry concentration (Bookstaber 2008; Johnson and Kwak 2011). This article acknowledges the value of both points of view. It develops a model of how financial institutions and regulators address emerging specific problems but through a cycle of crisis and response driven by biased incentives and social processes. The solutions to specific problems address immediate issues but do not alter substantially the underlying processes that likely will appear in other problems followed by intense compensatory regulatory responses in the future. The relative success of the markets suggests that internal and regulatory controls perform their core function tolerably well. However, incentives, ambiguities, and biases in financial services delay balancing responses, resulting in the system oscillating more strongly than it would ideally. Figure 1 provides one example of how regulatory actions fluctuate in financial markets. It charts civil fines reported in the annual statistical releases of the Securities and Exchange Commission (SEC) as a percentage of corporate securities underwriting in billions of dollars (Securities Industry and Financial Markets Association 2012; U.S. SEC 2012). Congress first gave the SEC power to impose substantial civil money penalties through the Insider Trading Sanctions Act of 1984 and expanded the SEC’s authority to use civil penalties over time (Weiss 2006). The amount of total fines ranged from $200,000 in Federal fiscal year (FY) 1985 to $2.3 billion in 2006, and was $978 million in 2011. The variability is similar if we scale the fines by other measures of market activity, and data for other financial regulators

6

would show similar fluctuations in regulatory actions (Barth et al. 2012). [Insert Figure 1 here.] This article focuses on how two levels of control shape behavior within this system. These are the internal controls within firms, which include the firms’ legal and compliance officers, internal auditors, and risk management units; and external regulatory controls by private and public regulatory organizations. To avoid making the model too complex for an article-length treatment we do not formally build other controls, in particular market controls and private litigation, into the model. However, later we review how market controls and private litigation relate to the dynamics described here. Financial firms range from global firms like JPMorgan Chase and Goldman Sachs to firms with only a few employees. Financial regulatory policy follows a principle that firms’ internal control systems are the most important defense against legal breakdowns, with external regulatory enforcement as a necessary but blunter control mechanism (McCaffrey and Hart 1998). Even aggressive external regulators must rely heavily on the firms’ internal control systems to function reasonably effectively. Industry regulators discussed in this article are self-regulatory organizations (SROs). Prior to mid2007, the two most important SROs in the securities industry were the National Association of Securities Dealers (NASD) and the New York Stock Exchange (NYSE). In July 2007 the NASD merged with the largest part of the NYSE’s regulatory operations to form the Financial Industry Regulatory Authority (FINRA), now the largest private regulator of securities markets (Karmel 2008). The Securities and Exchange Commission is the primary national public regulator of the securities industry. Other regulators like the Commodity Futures Trading Commission, Federal Reserve, Office of the Comptroller of the Currency, Federal Deposit Insurance Corporation, Consumer Financial Protection Bureau, and state agencies also regulate financial firms’ operations. We focus on the SEC because it is a principal regulator of operations discussed here and the central issues apply to other financial regulatory agencies (Barth et al. 2012). The SEC relies heavily on self-regulatory organizations, and especially FINRA, for routine external regulation of firms’ securities operations (U.S. GAO 2012a). However, the SEC is a critically important participant because it is responsible for the overall effectiveness of the securities industry,

7

including overseeing SROs and its own examinations of financial firms. Organizational research highlights how ambiguities about events and about how rules apply in context shape rule development and compliance (Feldman 2000; Feldman and Pentland 2003; March 2010; March et al. 2000). Such ambiguities influence how participants in financial markets assess the rewards and risks of business transactions and the rules governing them. Participants with different stakes clash over the need for controls over the transactions and evidence hardly ever settles the debates (Bookstaber 2008; Rebonato 2007). There are large “gray areas” in which views of whether or not a transaction complies with rules differ. Participants wanting to complete profitable transactions will frame them so that they appear to fall into a gray area or as clearly legal. Differentially powerful participants have different interests in how these issues are handled (Cox 2006; Langevoort 2007, 2011). The salient short-term rewards of completing transactions and the ambiguous longer-term risks from transactions, and how debates over those play out in firms and between firms and external regulators given differential technical capacities and power, are key elements of the behavioral model developed below. Understanding this process requires that we understand how internal controls and external private and public regulatory controls interactively shape rule development and compliance within financial firms. We analyze compliance dynamics in financial firms by closely examining diverse data related to the subject (Strauss and Corbin 1998). We draw on interviews with regulators and industry participants, observations of their panels at industry conferences, examinations of New York Stock Exchange disciplinary cases, and numerous reports and hearings on regulatory compliance in the financial industry. From 2003 to 2012 we conducted about 70 interviews with individuals involved directly in or overseeing this regulatory system. Most of the individuals interviewed were at the executive or seniorstaff level and the interviews lasted between 1 and 2 hours. The interviewees included individuals at the SEC and self-regulatory organizations, in financial firms and in law firms advising financial firms, in state regulatory agencies, in Congressional committees, and in other public organizations such as the Government Accountability Office. The interviews focused on factors shaping regulatory design and compliance and quotations used here were produced from notes taken during them.

8

The paper also draws on observation of numerous panels at conferences on financial market regulation between 2003 and 2012 involving regulators, legal and compliance professionals in financial firms, and attorneys. These include attendance at eight of the ten annual conferences of the Compliance and Legal Society (“Society” replacing “Division” in 2009) of the Securities Industry and Financial Markets Association (SIFMA), with examination of proceedings from all ten conferences. We also observed other conferences of SIFMA, the New York Stock Exchange, and the New York Federal Reserve. Individuals from industry, regulators, and related organizations engage each other on these panels in a setting different from an interview with an academic outsider and so the conferences complemented interviews. Quotations used here were produced from notes taken during the panels. We also examined and coded the minutes of the New York Stock Exchange’s disciplinary proceedings reported on its web site from 1990 through 2007 (NYSE Regulation 2012). The NYSE enforcement series ends in 2007 when most of the NYSE’s regulatory operations merged with the NASD to form FINRA. We coded the minutes of all 3,461 cases from 1990 through 2007, recording the firm and individuals involved, up to five violations per case, penalties, time period of violation, how the violation was brought before the NYSE, and other aspects of the case. The NYSE cases from 1990 through 2007 usefully indicate details of individual cases and patterns of regulatory compliance. Hearings and reports, including documents from legal proceedings, have documented extensively how internal controls and external regulation jointly shape behavior in financial firms. We examined numerous Congressional hearings focusing on regulatory compliance within financial markets since 1990. While Congressional hearings are largely staged they do describe main events and the questioning often becomes unscripted and informative. We also reviewed the frequent reports on regulatory compliance since 1990 by the Government Accountability Office (GAO, renamed from General Accounting Office in 2004), regulatory agencies, and other public and private sources. The interviews of regulators and market participants, observation of industry conferences, and examinations of NYSE disciplinary proceedings, Congressional hearings, and private and public reports since 1990 describe deeply and in complementary ways the dynamics of rule compliance in financial firms.

9

THE INTERNAL REGULATION CHALLENGE Competition for revenues drives behavior in a financial firm because revenues from transactions enhance the firm’s reputation, in turn attracting more transactions and more revenues and producing more profit. Competition among firms for rankings in “league tables” for business areas is strong and financial firms compensate, promote, and demote brokers, traders, investment advisers, and investment bankers (their “producers”) based mainly on the revenues they bring into the firm (Eccles and Crane 1988; Ho 2009; Langevoort 2011). A 2007 article on financial industry pay commented that Top producers within investment banking generally saw their total compensation rise 20% and at times more… But pay increases vary widely among bankers, with some receiving a smaller or higher increase. ‘Pay is now a meritocracy,’ says Sterling’s [Laura] Lofaro. ‘The increase in 2006 over 2005 was 15% to 20%,’ she says. ‘If you are a business developer and produced a lot of revenue, your compensation would be higher than that’ (Louria 2007: 16). Figure 2 captures this reinforcing mechanism where producers try to acquire revenues through transactions, enhancing their market reputation and profitability, in turn bringing additional transactions (Loop R1 in Figure 2). Conceivably, once they achieve a desired revenue level, pressures could ease, leading them to consider goals other than raising revenues (Loop B1). However, short-term success does not reduce producers’ desires for revenue-based bonuses and firms’ incentives to acquire market shares of attractive lines of business. Instead, success tends to create additional pressure to further increase the desired level of revenue and profits (Loop R2 in Figure 2). The output of financial services as a percentage of gross domestic product has increased substantially from the mid-1940s to the present; thus, the drive for revenues persists (Kedrosky and Stangler 2011). [Insert Figure 2 here.] Rules constraining producers’ activities slow or inhibit transactions and so producers live uneasily with them (Economist 2012). Kuznetsov conveys the image of such rules: “Compliance officers … oversee the operations of existing business lines and play an important restraining role in the development of any new business processes (as one of my trader colleagues used to tell me, compliance’s job was to say that anything I wanted to try was not a good idea.)” (2007: 37). Thus, an alternative way of responding to the pressure to produce is to increase the output through “cutting corners” on rules that

10

govern and limit transactions (Loop B2). The processes outlined above will destroy the firm because of persistent legal problems from eroded rule compliance unless balancing mechanisms come into play. Regulators expect that firms will have some compliance deficiencies that should not lead to enforcement actions. In 2007, 80% of the SEC’s examinations of securities firms resulted in compliance deficiency letters, with 14% of its examinations resulting in referrals to the SEC’s Enforcement Division that may or may not have resulted in enforcement actions (Richards 2008). An SEC Director of Enforcement, commenting on such referrals at an industry conference in 1996, said that “a lot of the cases we deal with don’t make the six inch limit and we throw them back” (McCaffrey and Hart 1998: 61). However, the frequency and severity of violations can increase to the point where they eventually damage the organization’s reputation, repel customers, and thereby reduce transactions (Karpoff et al. 2008a; Karpoff et al. 2008b) (Loop B3 in Figure 3). [Insert Figure 3 here.] Organizations, however, do not usually wait for external market signals to enforce rule compliance. Pressure to comply with rules increases as evidence of rule violations accumulates, strengthening internal compliance and risk management systems designed to prevent more violations (Loop B4). The increased compliance, however, slows down the rate at which transactions can be processed (Loop B5), further increasing pressures for revenues and continuing the cycle of production–internal control tensions. Figure 4 integrates figures 2 and 3 and summarizes the underlying feedback structure of the internal regulation challenge. On the left-hand side of the diagram, four feedback mechanisms describe the revenue-generating operations of the firm, while on the right-hand side three mechanisms describe the compliance-regulation processes. On the production side, two reinforcing processes (R1 and R2) create escalating pressure to complete transactions and erode compliance. On the compliance-enforcement side, three balancing mechanisms counter the effects of unchecked rule violations and resulting problems for the firm. The relative strength of each feedback mechanism determines how the firm balances revenuegenerating production and rule compliance at any time. [Insert Figure 4 here.]

11

Generally, the feedback structure in Figure 4 permits revenues to grow while inhibiting rule violations enough to prevent serious losses. This balancing has permitted the financial industry to grow substantially; if pervasive and continuous regulatory breakdowns were the norm, the industry would have collapsed (Black 2002). Nevertheless, the processes are unbalanced sufficiently frequently to create damaging legal problems. Individuals within the firm often do not identify regulatory violations until long after they have occurred and then respond only after further delay, so the pressure to comply with internal controls does not increase in a timely way. These delays are represented in the figures by lines perpendicular to the causal arrow. On these occasions, violations accumulate, often in subtle ways, eventually harming the firm, investors, or other market participants (Loop B3). Political processes inside firms intensify the biases in favor of transactions over compliance mechanisms. Revenue producers and internal control personnel such as legal and compliance offices negotiate how the firm will handle compliance-related issues. At this point the ambiguities of how transactions might work out and how rules and procedures do or do not apply to them come into play (Feldman and Pentland 2003; March 2010). In these debates compliance personnel justify greater attention to internal controls by citing examples of firms that suffered devastating legal and economic consequences after rule violations. Producers counter those arguments by pointing to how their competitors are proceeding with similar transactions and arguing that control personnel are extending rules to situations where they do not apply. The day-to-day debate is not about whether to forgo immediate high-priority revenues because of a high probability of regulatory problems. Rather, the debate is about whether to forgo immediate revenues because of a relatively low probability of unspecified regulatory or reputational sanctions at some unknown future point (Bookstaber 2008; Ho 2009; Langevoort 2011; McCaffrey and Hart 1998). Others have observed, in different areas, this bias toward the salient, immediate benefits of production and corresponding neglect of ambiguous indicators of long-term consequences. Oliva and Sterman demonstrated how firms that lack accurate measures of service quality and customer satisfaction can interpret the reduced attention to customers by service employees as “productivity increases.” Even

12

though stretched employees are working harder, there are subtle, serious declines in service quality (Oliva and Sterman 2001). Similarly, Repenning and Sterman discussed how the pressures of “hitting [production] targets” bias manufacturers toward short-term fixes of production problems and away from deeper process improvements that would provide long-term benefits but slow immediate production (Repenning and Sterman 2002). One of their manager subjects noted that “‘nobody ever gets credit for fixing problems that never happened’” (p. 280). In strikingly equivalent words applying to financial market regulation, an attorney wrote: The cost analysis [of noncompliance] is further complicated by the contingent nature of liability, i.e., a particular problem may never be discovered by the regulators and therefore actual costs may never be incurred. Even if a problem is discovered, it may not result in actual costs to the firm for a number of years, by which time the P&L [Profit & Loss] has already been booked and employee bonuses paid. Responsible employees may have left the firm or moved to different positions, never knowing the negative impact of the problems they left behind. And, past success tends to remove the urgency and undercut concern about future risks. Complacency leads to under resourcing of critical support functions. (Citera 2007: 3). Accordingly, incentives to follow best internal control practices or to forgo profitable “gray-area” transactions because of a low risk of future regulatory problems tend to be weaker than incentives for immediate production and profit. Producers are in stronger positions in related internal debates because they bring in the revenues on which the firm visibly depends and they are most familiar with the transactions. In contrast, internal control personnel are likely to be arguing for actions that certainly will slow transactions in order to reduce an ambiguous risk of problems; furthermore, they almost always understand the transactions at issue less than the business units. Incidents later judged to be rule violations or control failures are regarded, as they occur, as reasonable business judgments. For example, reports on control failures related to the financial crisis beginning in 2008 emphasized that internal control personnel did not challenge producers’ judgments effectively because they lacked the technical ability or the power to override business unit views on the transactions’ benefit-cost balance for the firm (Economist 2008; Senior Supervisors Group 2008, 2009; Société Générale General Inspection Department 2008; UBS 2008). In sanctioning Credit Suisse International for securities-pricing violations, England’s Financial Services Authority noted that

13

Certain personnel within control functions with responsibility for checking prices were overly deferential in challenging certain [Structured Credit Group] traders and do not appear to have had sufficient seniority or management support to challenge effectively…. Undue reliance was placed on the technical ability and revenue contribution of certain Front Office [business unit] staff, who were highly influential in down-playing price testing variances and in influencing the price testing methodology used, and did not take appropriate action to control and manage such staff effectively (Financial Services Authority 2008: 4). Compensation patterns reflect this disparity in power (Pfeffer 1994). In 2005 the weighted average compensation for the Sales and Trading/Financial Management area of securities firms was about $130,000, compared to about $72,000 for the Compliance, Audit, Examiners and Lawyers area (Securities Industry and Financial Markets Association 2007: 31). It should be noted that pressure to produce often has an operational manifestation different from the explicit rule violations described above. If the firm as a whole is under pressure to produce, this might stimulate the creation and introduction of new products and services. Since the 1970s, financial firms have continuously developed new lines of business to sell unique, high-margin products. Substantial deregulation of financial services accelerated such financial innovation since the mid-1980s; firms frequently developed the products because firms could plausibly argue that existing regulations did not apply to them (Miller 1986: 460; U.S. GAO 2009). Several ambiguities intensify the tension between production and rule compliance in such newer lines of business and so make related regulatory problems particularly likely. How regulations might apply to novel, complex activities is not as settled as how they apply to familiar activities. Participants differ over what the rules should be because the activities present new tradeoffs between potential gains and liabilities. The rules are not taught or programmed as easily because the activities are less understood and so require more interpretation. The creation of novel products increases the number of transactions and the revenue generated by the firm. These transactions, however, often result in abuses that had not been anticipated by the regulatory bodies as activities are less understood. As these abuses are detected, after significant delays, consumers and markets put pressure to increase and improve regulation for those new products. This feedback loop (B6), and the resulting impact on production (B7) and firm reputation (B8) are captured in Figure 5. The structure and behavior described by these loops is analogous to the

14

structure and behavior of the loops describing rule violations (Figure 3). To keep our diagrams and explanations simple, we will not include this response in future explanations. We ask the reader to keep in mind that a parallel structure exists for novel products every time we talk about rule violations. [Insert Figure 5 here.] Thus, the production-side loops tend to dominate the compliance-side loops, creating an environment in which production pressures tend to lead and compliance efforts follow in order to maintain the level of violations and problems within acceptable parameters. Once enforcement is achieved, compliance reestablished, and violations contained, production pressure increases once again, eroding compliance and creating additional violations and regulatory problems. EROSION OF THE RULE ENFORCEMENT STANDARD Financial firms tolerate eroding rule compliance when managers favor erring on the side of production over rule compliance because they see salient, certain competitive pressures and non-salient and uncertain regulatory risk. As noted above, even regulators expect some compliance deficiencies in the course of securities firms’ operations, with 80% of SEC examinations in 2007 resulting in deficiency letters but no formal enforcement action (Richards 2008). At the firm level, lower levels of rule compliance allow an increased number of violations that gradually become the norm. Over time, norms of industry behavior evolve from business practices. The drive for transactions and revenue—the two engines of growth described above (Loops R1 and R2 in Figure 2)—can put enough pressure on the producers that results in permanently eroding rule compliance (Oliva and Sterman 2001). As a result, producers get used to a lower rule enforcement standard, further diminishing intensity of rule enforcement, eroding rule compliance even further, increasing the number of rule violations (Loop R3 in Figure 6). What happens within individual firms becomes a standard of behavior across the industry and even accepted by regulators in the absence of compelling evidence of present harm. [Insert Figure 6 here.] Firms thus slip into what Vaughan (Vaughan 1998, 1999) called a “normalization of deviance.” Identifying the existence of violations takes time; assessing the impact of the violations takes even longer,

15

especially when the transactions are complex and potential legal problems are ambiguous. With these delays and the pressures to reduce compliance from the production side of firms attempting to maximize profits, it becomes normal for some rule violations to be seen by producers and business managers as trivial technical violations or bypassing of “obsolete” rules incompatible with current business realities. Firms’ standards propagate throughout the industry, becoming industry’s standards by changing what the governing bodies in the industry consider acceptable, leading the industry into a time not only of prosperity and large numbers of transactions but also of accumulating violations (U.S. House Committee on Financial Services 2003; U.S. Senate Committee on Homeland Security and Governmental Affairs 2011). Industry and government regulation can come to accept deteriorating industry standards as normal slippage from ideal compliance, allowing the erosion to become structural and pervasive (McCaffrey and Hart 1998: 68-71; McCaffrey et al. 2007). An attorney who advises firms and has extensive regulatory experience observed in one of our interviews that This is probably why you have a dumbing down of industry rules by consensus. The comment you always hear is “so and so does it.” Everyone takes comfort from the fact that everyone does it. Meanwhile the SEC and NYSE, even if they might be generally aware of something, may come to accept it in the absence of a major breakdown or scandal. There is a comfort and confidence from what is going on the Street, sometimes a false comfort. At the Compliance and Legal Division national conference in 2005, the Director of Enforcement at the SEC reflected on why regulators and firms had not challenged conflicts of interest between investment banking and investment analysts that were widely recognized and had even been accepted as a business model (U.S. GAO 2012b). He commented, “You can be completely comfortable with practices, and they can be legal, but things evolved in a sufficiently slow way in a direction that becomes unmoored from the original situation so people did not respond to the change.” Such erosion of standards has been documented in other contexts (Oliva and Sterman 2001; Sterman et al. 1997). Internal controls tend to be structurally insufficient to prevent serious compliance problems given incentives within firms and so external regulation is required to maintain the behavior of the system within tolerable limits. The next section reviews external regulation as a control mechanism.

16

THE ROLE OF EXTERNAL REGULATION External regulators try to prevent rule violations through inspections, market surveillance, and enforcement. The controls operate well enough to allow the markets to function reasonably effectively but do not prevent the cycle of crisis, strengthening of controls, erosion of controls, and further crises. We discussed earlier how revenue producers within firms usually win debates with internal controllers over gray-area transactions. Ambiguities in rules coupled with the distribution of power within the firm shape these debates. Producers bring in the revenues on which the firms depend, they understand the transactions more than internal controllers, and the transactions’ risks are uncertain and thus discounted outside of moments of heightened regulatory scrutiny. Similar inequalities in power and technical ability shape debates between industry and external regulators and so external regulators respond slowly to accumulating problems and new regulatory pressures diminish rapidly following crises. Just as firms’ needs for revenue favor revenue producers and reduce internal controls’ effectiveness, the political and organizational strength of the financial services industry reduces external regulation’s effectiveness. Congress and the President oversee regulatory agencies; private groups also influence regulatory agencies as a matter of law (Croley 2008). The financial services industry, working through Congress, the President, and agencies directly, constrains external regulators by affecting their budgets, staffing, jurisdiction, and rule development and enforcement. From 1998 through 2012 “Finance/Insurance/Real Estate” ranked third among industry sectors in lobbying expenses vis-à-vis the Federal government, behind “Health” and “Miscellaneous Business” and substantially ahead of groups like Communications/Electronics, Energy/Natural Resources, and Defense (Center for Responsive Politics 2012). Significant violations or breakdowns in the financial system are almost always required prior to new controls on major financial firms (Barth et al. 2012; Coffee 2012). The SEC and self-regulatory organizations are small organizations relative to the volume of business they must oversee. FINRA has about 3,200 employees overseeing 4,420 organizations with 162,575 branch offices and approximately 629,280 registered personnel (Financial Industry Regulatory Authority 2012). The Securities and Exchange Commission, with about 3,853 employees at the end of 2011 and

17

responsibility for implementing almost all aspects of the Federal securities laws, is far smaller than required to oversee its markets effectively (American Bar Association 2012; Boston Consulting Group 2011). Regulators thus enforce the law selectively based on the political and economic costs of action. External regulators especially recognize their problems in overseeing complex financial technology (Bookstaber 2008; Faerman et al. 2001). What a risk manager at a financial firm said in 1994 still applies: I’ll tell you, if I woke up one day and, God forbid, I was a regulator, I don’t think I’d know what to do. Here in this place, I’m the guy the CEO looks at and says, ‘What are our exposures? What do we not want to have happen? What could be the costliest thing that could go wrong?’ And for me to get the information I need to answer him is a real challenge. And yet I have unlimited access to any information I want. Anybody will take my phone call and answer any question. I tend to know the sort of questions that should be asked. …. And I say to myself, “If I’m in this position, what is a regulator going to do?” (Loomis 1994: 57). Numerous reports document the difficulties external regulators have in responding to accumulating problems from financial innovations such as different forms of asset-backed securities and derivative financial instruments (Financial Crisis Inquiry Commission 2011; U.S. SEC Inspector General 2008a, b). For example, Charles Gasparino described reactions to an SEC examination of Bear Stearns in 2007: SEC officials held a series of meetings in Bear Stearns forty-second-floor conference room, where the head of each division talked about the health of his unit…with six SEC officers poring over everything on Bear’s books. The funding was the last topic to be covered. Paul Friedman, who was in charge of repo, along with the rest of the finance team, spent nearly three hours going over all of Bear’s credit facilities—its repo lines, its short-term funding obligations, its cash and cash equivalents on its books—stressing that Bear’s liquidity was fine. By the end, the SEC guys were staring at Friedman with glazed eyes, but Bear had passed the test. Friedman actually felt sorry for them. “I think they might have understood about twenty-five percent of that,” he said to a colleague after the presentation…At Bear, executives had had several conversations with SEC staffers. “They all had this deer-in-the-headlights look, as if they didn’t know what was happening and were afraid to do anything on their own,” said one Bear Stearns executive with direct knowledge of the matter (Gasparino 2009: 276, 374). Agencies tend to focus on problems fitting their stable procedures and competencies and do not have incentives to attend to problems that may be accumulating but that have not yet caused conspicuous damage. A senior congressional staff member commented on this point in an interview with us: Historically, the agencies have acted reactively. That’s the nature of enforcement agencies. It’s a catch-22 for the SEC. In the mutual funds cases, the SEC allegedly messed up, and so the SEC is blamed for being reactive. So, they want to move actively in regulating hedge funds, they want to be proactive. But now they are being severely criticized for moving into hedge funds and overregulating. It’s going to take a while to change the mindset.

18

The SEC abandoned the effort to regulate hedge funds after an adverse court decision and because it could not point to economic problems linked to unregulated hedge funds (U.S. Court of Appeals for the D.C. Circuit 2006; U.S. House Committee on Financial Services 2007). Only after the financial crisis beginning in 2008 did the Dodd-Frank Act grant it authority to regulate hedge funds (McCaffrey 2011). Major financial firms, which are distinctively powerful participants in the system, develop lines of business partly to avoid existing regulatory restraints and usually can block new controls in the absence of overwhelming evidence of related harms. Critics charge that financial regulatory agencies do not target these newly profitable lines of business because their staffs lack the requisite technical abilities and want to avoid the political and economic costs of litigating related cases. These critics add that relatively close working relationships between regulatory staff and financial firms and the law firms representing financial firms worsen this problem (Coffee 2012; Project on Government Oversight 2011; Taibbi 2011; U.S. GAO 2011a). Agencies respond that they must operate within legal and political constraints and that trying aggressively to head off problems in the absence of evidence of violations, particularly in complex, new, and profitable lines of business, would drain their limited resources in extended judicial and political conflicts (Gallagher 2012; Khuzami 2011). Either way, external regulation, like internal corporate regulation, does not prevent the accumulation of serious problems in securities markets, intense reactive regulatory pressures, and ensuing easing of controls permitting the next cycle. As noted earlier, dramatic spikes in the failures of financial firms or sharp declines in market values associated with financial crises do produce strong regulatory responses such as new statutes and escalating regulatory actions reflected in Figure 1. Such vivid disruptions, however, occur only after the underlying problems have accumulated unaddressed for sufficiently long periods. RESPONSE TO ACCUMULATED VIOLATIONS Problems exist in relation to other problems, “embedded within a complex institutionalized system of problem formulation and dissemination” (Hilgartner and Bosk 1988: 55). Industry addresses a problem when outsiders hold the industry accountable for events or when insiders become concerned about broader reputational effects; firms respond aggressively to violations when they exceed a level considered

19

damaging to the firm (Billings et al. 1980; Hoffman and Ocasio 2001). Recognizing violations, and their impact, draws attention to other violations, and dormant problems suddenly become evident (Loop R4 in Figure 7). Referring to the subprime mortgage crisis, one analyst observed that “prolonged close scrutiny often turns up all kinds of dubious practices that in normal times are under the radar” (Jewell 2008: C1). Among the first responses to the new awareness of accumulated rule violations is to make the rule enforcement standard more stringent, redefining as violations practices that previously had been tolerated. Heightened scrutiny of practices triggers an increase in the identification of rule violations leading to even higher rule enforcement standards (Loop R5 in Figure 7). [Insert Figure 7 here.] Raising the acceptable standard of compliance by tolerating fewer gray-area violations and increasing the pressure to comply with the rules eventually leads to higher rule compliance (notice the delay in the link between pressure to comply and rule compliance), slowing the emergence of actual and detected violations, along with their impact, completing an important control loop (Loop B9 in Figure 7). However, the faster response of the two reinforcing loops in Figure 7 accounts for the oscillatory behavior observed in the data and often cited in interviews and conferences; attention to rule violations and rule enforcement intensifies sporadically after the perceived impact of rule violations tips over a certain limit. Once standards are enforced and the salience of violations diminishes, the firms individually, the industry as a whole, and external regulators return to a bias toward tolerating transgressions they see as minor, low priority, or falling into gray areas. This sets up a subsequent erosion of standards. After compliance standards have eroded during periods of prosperity the impacts of accumulated violations eventually become evident. External regulators and internal controllers tighten enforcement of existing rules, generate new types of rules, and try to close loopholes in rules to prevent new violations. We represent these responses in Figure 8 as sanction- and regulation-based responses (Loops B10 and B11 respectively). These responses further amplify the oscillatory behavior described above as they push the system for more violent reactions to its departures from equilibrium. Escalating regulatory activity makes violations less likely for a period, reducing the level of problems experienced by the firm. These

20

changes increase the strength and sensitivity of control systems as internal controllers and external regulators acquire more resources and organizational and political power. [Insert Figure 8 here.] The intense focus on compliance, however, eases as changes are enacted and external pressures recede. Controls over some lines of business do ratchet up because of mandated organizational changes (U.S. GAO 2012b). However, the increased intensity of controls diminishes as the salience of a financial crisis or violations diminishes. Also, as discussed above and depicted in Figure 5, new lines of business emerge, partly to minimize the impact of regulatory controls, producing new types of violations. These fluctuations in regulatory pressures appear in various ways. Congress historically has passed most laws giving financial regulatory agencies substantial new powers only after financial crises (Barth et al. 2012; Coffee 2012; U.S. GAO 2009). Regulatory penalties also reflect the cycles (see Figure 1). An individual in a major financial firm remarked during an interview in late 2003—shortly after the passage of the Sarbanes-Oxley Act—that Good regulation is talking to stakeholders, coming to some reasonable agreement that preserves integrity and allows business to get done. Now, so much of regulation is by fiat and its credibility is undermined. The environment is a lot tougher now and bad regulations get through. We had a good relationship with the majority of regulators and had a good debate but the relationship now is different, even with the ones that are smart and rational. Now they’re afraid to be perceived as too close to industry. They’re scared. The regulators have a gun to their heads by Congress and the press…What had been a healthy relationship has become more adversarial. However, by 2005, a common argument was that the Sarbanes-Oxley Act and regulatory enforcement had become too aggressive. A panelist from the Consumer Federation of America described the title of one panel at the June 2005 NYSE regulatory conference—“Ethics and Compliance in the Securities Industry”—as “so six months ago. Now what you hear is talk of the need to restore balance to regulatory system that has gone too far. Needless to say, this is a view that I do not share.” The DoddFrank Act similarly is a potentially strong regulatory statute passed during a financial crisis that, as implemented, likely will be much less constraining than envisioned originally (Coffee 2012; Krawiec 2012). Internal control and regulatory standards ratchet upwards following accumulated violations but recede enough from the high point of the cycle to permit the development of a new cycle.

21

MARKET FORCES AND PRIVATE LEGAL ACTIONS We have focused on firms’ internal controls and external regulatory controls to explain dynamics of regulatory violations and intermittent elevated regulatory pressures. Market forces and private legal controls are two additional social controls on financial services but to simplify the diagrams we have not included these in the model. It is important to note briefly, however, why market and private legal controls do not prevent the patterns discussed here. Market controls in this context mean customers refusing to deal with financial firms that violate regulations governing customer protection and operational integrity. These customer pressures do not prevent the eroding compliance standards that lead to periodic crises modeled above. About 68% of the 3,461 NYSE disciplinary cases that we examined for 1990-2007 originated at least partly from a customer complaint, but customers usually complained after they incurred substantial losses. Extensive research documents that individual investors’ cognitive biases work against effective market controls. Individual investors are far more likely to assess the value of investment advisors by the personal attentiveness of the advisor than by examining investment results. Investors also tend to overestimate their probable success in rising markets and usually do not challenge the firms advising them (Hung et al. 2008; infogroup/ORC 2010; U.S. SEC Staff 2011). Institutional investors like mutual, pension, and hedge funds have information, knowledge to evaluate alternatives, and economic power to deal with financial firms more effectively than individual investors (Ljungqvist et al. 2007). Still, financial firms regularly are in a much stronger position even when dealing with institutions because they exist precisely because of their specialized information and ability to handle transactions (Morrison and Wilhelm 2007). Institutional investors, like individuals, regularly do not challenge their advisors’ recommendations (Langevoort 1996). Furthermore, institutional investors’ portfolio managers are evaluated on the basis of the returns for the funds they manage. Like business offices within financial firms, they push for profitable transactions, punish financial firms with stock prices lagging more aggressive competitors, and do not counter the bias towards transactions and against tight controls modeled above (Bratton and Wachter 2010). Institutional

22

investors also sometimes collaborate with financial firms in the corner-cutting leading to rule violations (New York Stock Exchange 2006a, b). Thus, market controls from individual or institutional investors do not prevent the observed dynamics of rule violations and reactive regulation. Besides refusing to deal with deceptive firms and individuals, investors can file private legal actions alleging rule violations against firms when the violations harmed the investors. Legal and compliance personnel from firms regularly comment that the costs of private litigation after regulatory violations justify stronger internal controls and more diligent compliance with external regulation (Gentin et al. 2011; Turan et al. 2007). However, pressures from private litigation, like customer complaints, emerge especially after violations occur and are far less intense when markets appear to be healthy, even though problems are accumulating within firms (Cornerstone Research 2012). Also, legislation and a series of 5-4 Supreme Court decisions since the mid-1990s have made it much more difficult for investors to file lawsuits alleging securities fraud. The narrow Supreme Court majorities justified the new restraints on private litigation partly on the grounds that the SEC retained broad powers to file fraud claims but, as noted above, the SEC does not prevent the cycles of rule violations modeled here (U.S. GAO 2011b). Political and economic power affect decisions particularly when the technical merits of competing options are unclear (Latour 1986; Lukes 2005). Plausible arguments can be made for either expanding or narrowing private litigation in financial markets; the political strength of the financial services industry tipped the outcomes in favor of new restrictions on private litigation (Glover 2012; Hittinger and Bona 2008; McCaffrey and Hart 1998: chapter 5). DISCUSSION The model developed here describes how incentives and social processes produce dysfunctional cycles of accumulating rule violations and compensating regulation. Pressures for production compete with production-slowing rules in financial firms, as in other types of organizations. In financial markets this dynamic generally favors production because of the salient, certain, and short-term need for revenues and the less salient, uncertain, and long-term chance of regulatory problems. Undetected or tolerated

23

regulatory problems accumulate because firms are under pressure for revenues, eventually leading to regulatory breakdowns and then demands for stronger enforcement of existing rules and new controls. As existing rules are enforced more strongly and new rules are enacted, the problems recede; external pressures diminish; the firms’ discretion over their internal operations again increases; and the accumulation of regulatory problems leading to compensating regulation begins anew. Political circumstances favoring production within firms and between the financial industry and regulatory organizations help perpetuate the lagged corrective adjustments generating these imbalances. This sequence appeared in the collapse of brokerage firms’ financial controls at the New York Stock Exchange in the 1960s and 1970s (the “back-office crisis”) (Benn 2000; Seligman 2003) and the wave of insider trading cases and related legislation associated with merger and acquisition activity in the 1980s (Stewart 1991). It fits the regulatory problems associated with the development of the derivatives industry from the early 1990s to the present, the savings and loan crisis of the 1980s and early 1990s, the dot.com bubble and collapse of the 2000s, and the events leading to the financial crisis beginning in 2008 (Black 2005; Bookstaber 2008; Das 2010; Financial Crisis Inquiry Commission 2011; McCaffrey et al. 2007). The sequence outlined here fits more recent private and public regulatory breakdowns in futures trading, the development of the London Interbank Offered Rate (LIBOR), risk management at major financial institutions even after the financial crisis of 2008, and in the core technologies of executing and processing financial transactions (Freeh 2013; Patterson 2012; U.S. CFTC 2012; U.S. Senate Permanent Subcommittee on Investigations 2013). Financial industry analysts have referred for decades to its “regulatory pendulum” and to the persistent illusion that “This Time It’s Different” (Reinhart and Rogoff 2009). The model here operationalizes the feedback mechanisms that interact to create the cycles of eroding compliance followed by strong compensatory regulatory responses found in these events. While we have focused on financial markets, the model integrates more general findings in organizational sciences about situations in which pressures for production and rule compliance conflict. We believe that its main contribution is to describe systemically how organizations attend to rules depending on the salience, time horizon, and relative certainty of the benefits of production compared to

24

those of compliance. The model captures the operative mechanisms responsible for the development of pressures for production and for rule compliance in organizations (Figure 4). The model derives longterm consequences from day-to-day transactions, that is, explains macrobehavior by using a transactionbased microstructure of the system. It combines short-term and long-term responses to organizational problems and pressures to produce and comply with rules. This simple set of interacting feedback processes provides a structural explanation both for problem-prone organizations characterized by erosion of standards and increased violations and for organizations following rules more reliably. Erosion of compliance and increased violations and problems are more likely to occur in organizations in which production-generating loops dominate (Loops R1 and R2 in Figure 4) than in organizations in which compliance-generating loops dominate (Loops B4 and B5 in Figure 4, R3 in Figure 6, and B9 and R4, in Figure 7). The salience, time horizon, and relative certainty of production benefits compared to those of good compliance affect the different loops’ strength. In some areas, including financial markets, rule enforcement erodes when the short-term benefits of production diminish concerns about unspecified, distant risks from rule or procedural violations (Jackall 1988; Oliva and Sterman 2001; Reason 1997; Repenning and Sterman 2002). Beliefs, cognitive assumptions, formal and informal procedures, and rewards for completing transactions versus maintaining tight internal controls reinforce the bias toward completing transactions and away from equally mindful enforcement of rules (Jarzabkowski 2008; Lange 2008; Misangyi et al. 2008). The consequences are different when failures are quickly and prominently visible. Studies of highreliability organizations like aircraft carriers, air traffic control, and nuclear power plants show how training, rewards and sanctions, and working assumptions grow out of concerns that serious accidents will jeopardize the organization and responsible parties. These studies do document the same productionregulation tensions found in financial firms and how production goals sometimes prevail over effective internal controls. However, the mechanisms for weighing the two concerns are more balanced because the potential damages and liabilities from control failures are more immediate and salient physically and so internal controls generally are more robust (Boin and Schulman 2008; LaPorte and Consolini 1991;

25

O'Neil and Krane 2012; Perin 2005; Roberts 1990a, b; Roberts et al. 1994; Rudolph and Repenning 2002; Weick and Sutcliffe 2007). The model’s ability to account for different modes of behavior—rule erosion versus more reliable compliance—helps provide a useful integrated theory of rule development and compliance (Repenning 2000). The model also suggests policy implications, as the rule compliance cycles discussed here could be smoothed if even one of the main control mechanisms operated reliably and without delay. For example, the effect of loop B4 (figure 4) that describes enforcement triggered by detected violations could be strengthened by decreasing the time between the identification of rule violations and an increased pressure to comply, i.e., rule enforcement. This would result in higher pressure to comply and more stable rule compliance. Similarly, decreasing the time between the detection and impact of abuses will result in faster and stronger pressure to create new regulation to bind the operating system (see loop B6 in Figure 5), i.e., accelerating rule evolution. Yet, the model’s fundamental drivers—the salience, relative certainty, and timing of the benefits of production compared to the risks of cutting corners in rule compliance—and the data analysis which generates the model lead us to be pessimistic about the success of such interventions in easing the regulatory cycles in financial markets. Congress and agencies have established new rules targeting each of these levels of control after financial crises. Since the 1970s regulatory agencies have increased supervisory requirements within firms’ business and internal control offices after conspicuous internal control failures (McCaffrey 2011; McCaffrey and Hart 1998), and Congress has given regulatory agencies new enforcement powers, including powers to potentially “claw back” pay awarded for illegal or damaging transactions (Chan et al. 2012; Fried and Shilon 2011; Govtrack 2012; Miller 2012). The new rules developed over the past few decades have helped support larger and more diverse financial markets, and, as noted earlier, U.S. financial markets operate reasonably well in comparison with those of other nations (World Economic Forum 2012). However, the cycles in which regulatory problems accumulate, controls abruptly increase, and controls subsequently erode persist (Coffee 2012). The relative salience, timing, and certainty of transactions’ benefits and risks and the political processes driving the system—

26

the conditions generating the problem in the first place—erode the new controls (Barth et al. 2012; Bookstaber 2008). Thus, the impediments to improving controls enough to diminish these oscillations are formidable. One line of research to understand the possibilities of mitigating these structural forces would study how agency, through strategic and tactical choice, potentially modifies structure in rule compliance. Research on institutional work—the processes of creating, maintaining, and disrupting institutions, including systems of rules—focuses on how participants construct institutional processes even as they are constrained by them (Barley and Tolbert 1997; Feldman and Pentland 2003; Jarzabkowski 2008; Lawrence and Suddaby 2006; Lawrence et al. 2009). Empirical research has not strongly differentiated corporations’ rule compliance or regulatory agencies’ effectiveness based on measures of organizational structure. However, one consistent finding is that upper managers who focus on regulatory compliance and ethics tend to strengthen corporate compliance programs (McKendall et al. 2002; McKendall and Wagner 1997; Parker and Nielsen 2011; Tyler and Blader 2005; Weaver et al. 1999a, b). Audits of large banks by their regulators reported that the banks’ risk management implementation, and their losses from the financial crisis beginning in 2007, varied substantially. The scope and depth of managerial attention to internal control best predicted effective or deficient risk management (Senior Supervisors Group 2008, 2009). Similarly, research on government organizations, including regulatory agencies, has discussed how, in some cases, upper and middle managers manage to operate more autonomously within established power structures by how they handle constraints and events (Breyer 1993; Carpenter 2010; Carpenter 2001; Carpenter and Krause 2012; McCraw 1984). So, it would be worthwhile to consider the extent to which active agents in organizational systems potentially can alter the deeply embedded dynamics among technology, incentives, political power, and rule dynamics examined here.

27

Figure 1. Variability of SEC Civil Penalties

Figure 2. Operations Structure

Firm Reputation

+

R1 Success-breedssuccess Loop

+ Desired Revenue

+

+ Revenue

Transactions

-

Meet-the-goal Loop

Pressure to Produce

+

+

B1

R2 Growthpressure Loop

B2

-

Rule Compliance -

Arrows indicate the direction of causality. Signs (“+” and “–”) indicate the polarity of relationships. A plus sign means that, all else being equal, if the cause increases (decreases), the effect increases above (decreases below) what it would otherwise have been. Similarly, a minus sign means that, all else being equal, if the cause increases (decreases), the effect decreases below (increases above) what it would otherwise have been. Balancing loop polarity (denoted by B in the loop identifier) indicates a regulating (negative) feedback loop. Reinforcing loop polarity (denoted by R in the loop identifier) indicates a self-reinforcing (positive) feedback process. Delays separating the cause and the effect are indicated in the diagrams by a line perpendicular to the flow of the causal arrow (e.g., between “revenue” and “desired revenue”).

B2 Cutting-corners Loop

Figure 3. Compliance Structure

Figure 4. Internal Regulation Challenge Structure

Firm Reputation -

+

B3

+

B5

Transactions -

-

Rule Compliance

Enforcement Loop

Good-compliance-isgood-business Loop

Success-breeds -success Loop

Rule Violations B4

+

B3

R1

Good-compliance-isgood-business Loop

+

Firm Reputation -

+

+ Revenue

+

Detected Rule Violations +

Pressure to Comply +

+ Desired Revenue

Rule Enforcement Standard

Growthpressure Loop

+

Transactions +

B1

R2

-

+

B5

Meet-the-goal Loop

Pressure to Produce

B2

-

B4

Rule Compliance -

Rule Violations

+

Enforcement Loop

B5 Compliance-slows-production Loop

28

+

Pressure to Comply +

B2 Cutting-corners Loop B5 Compliance-slows-production Loop

+

Detected Rule Violations Rule Enforcement Standard

Figure 5. Introduction of New Products Structure

Figure 6. Rule Enforcement Standard Structure

Firm Reputation B8 No-abuses-is-goodbusiness Loop

+ + B7 Novel Product Transactions + Abuses + + + Detected B6 Abuses Novel Products Regulation and Services -based + Response Regulation Loop Perceived + Impact of Detected Pressure to Regulate + Abuses

Pressure to Produce

B7 Regulation-slowsproduction Loop

Pressure to Regulate +

-

B4 Enforcement Loop

+ Rule Compliance

+

Firm

R3 Standard-erosion Loop

R5 Heighted-scrutiny-leadsto-the-identification-ofviolations Loop

B9 Standardcorrection Loop

-

+

Tolerance to Rule Rule Enforcement Violations Standard

29

Detected Rule Detected Rule Violations Violations

+

Rule Violations -

B4

+

Pressure to Comply

+

Rule + Compliance B4

Enforcement Loop

+

Perceived Impact ofof Perceived Impact Rule Violations Rule Violations

Firm

Regulation-based Response Loop

Firm

External

+ Normal Level of Detected Rule Violations

+

Pressure to Comply

Perceived Impact of of Perceived Impact Rule Violations Rule Violations

Firm

+

Detected Rule Detected Rule Violations Violations

External

+ Rule Violations

+

Firm

External

+

B11

+ Regulation

External

+

R4 Rule-violationssaliency Loop

Figure 8. Responses to Rule Violations Structure

External

Attention to to Rule Attention Rule Violations Violations Firm

External

Figure 7. Standard Correction and Attention to Rule Violations Structure

B10 Sanctions-based Response Loop

+

Sanctions for Rule Violations

REFERENCES

Adler, P.S., B. Borys. 1996. Two Types of Bureaucracy: Enabling and Coercive. Administrative Science Quarterly 41(1) 61-89. American Bar Association. 2012. Increased and Reliable Funding for the SEC and the CFTC (Letter to Congressional Leaders). American Bar Association, Washington (May 17). Ashforth, B.E., D.A. Gioia, S.L. Robinson, L.K. Treviño. 2008. Re-Viewing Organizational Corruption. Academy of Management Review 33(3) 670-684. Barley, S.R., P.S. Tolbert. 1997. Institutionalization and Structuration: Studying the Links Between Action and Institution. Organization Studies 18(1) 93-117. Barnett, W.P., M.T. Hansen. 1996. The Red Queen in Organizational Evolution. Strategic Management Journal 17(S1) 139-157. Barth, J.R., G. Caprio Jr., R. Levine. 2012. Guardians of Finance: Making Regulators Work for Us. The MIT Press, Cambridge. Benn, A. 2000. The Unseen Wall Street of 1969-1975. Quorum Books, Westport, CT. Berman, D.K. 2007. Why Street Bankers Get Away With Repeating Old Mistakes Wall Street Journal, November 6: C1. Billings, R.S., T.W. Milburn, M.L. Schaalman. 1980. A Model of Crisis Perception: A Theoretical and Empirical Analysis. Administrative Science Quarterly 25(2) 300-316. Black, B.S. 2002. The Legal and Institutional Preconditions for Strong Securities Markets. Securities Law Review 2002 73-147. Black, W.K. 2005. The Best Way to Rob a Bank Is to Own One. University of Texas Press, Austin. Boin, A., P. Schulman. 2008. Assessing NASA’s Safety Culture: The Limits and Possibilities of HighReliability Theory. Public Administration Review 68(6) 1050-1062. Bookstaber, R. 2008. A Demon of Our Own Design: Markets, Hedge Funds, and the Perils of Financial Innovation. John Wiley & Sons, Inc., New York. Boston Consulting Group. 2011. U.S. Securities and Exchange Commission Organizational Study and Reform. The Boston Consulting Group, Bethesda, MD. Bratton, W.W., M.L. Wachter. 2010. The Case Against Shareholder Empowerment. University of Pennsylvania Law Review 158(3) 653-728. Breyer, S. 1993. Breaking the Vicious Circle: Toward Effective Risk Regulation. Harvard University Press, Cambridge. Carpenter, D. 2010. Reputation and Power: Organizational Image and Pharmaceutical Regulation at the FDA. Princeton University Press, Princeton. Carpenter, D.P. 2001. The Forging of Bureaucratic Autonomy: Reputations, Networks, and Policy Innovation in Executive Agencies, 1862-1928. Princeton University Press, Princeton. Carpenter, D.P., G.A. Krause. 2012. Reputation and Public Administration. Public Administration Review 72(1) 26-32. Center for Responsive Politics. 2012. Lobbying: Ranked Sectors. Center for Responsive Politics, Washington.

30

Chan, L.H., K.C.W. Chen, T.-Y. Chen, Y. Yu. 2012. The effects of firm-initiated clawback provisions on earnings quality and auditor behavior. Journal of Accounting and Economics 54(2–3) 180-196. Citera, G.S. 2007. Broker-Dealer Supervision: A New Paradigm. Insights: The Corporate & Securities Law Advisor 21(7) 1-9. Clinard, M.B., P.C. Yeager, J. Brissette, D. Petrashek, E. Harries. 1979. Illegal Corporate Behavior. United States Department of Justice, Washington. Coffee, J.C., Jr. 2012. The Political Economy of Dodd-Frank: Why Financial Reform Tends to be Frustrated and Systemic Risk Perpetuated. Cornell Law Review 97(5) 1019-1082. Cornerstone Research. 2012. Securities Class Action Filings: 2011 Year in Review. Cornerstone Research, Menlo Park, CA. Cox, J.D. 2006. The Role of Empirical Evidence in Evaluating the Wisdom of the Sarbanes-Oxley Act. University of San Francisco Law Review 40 823-844. Croley, S.P. 2008. Regulation and Public Interests: The Possibility of GOOD Regulatory Government. Princeton University Press, Princeton. Das, S. 2010. Traders, Guns, and Money: Knowns and Unknowns in the Dazzling World of Derivatives, Revised ed. Pearson, London. Eccles, R., D. Crane. 1988. Doing Deals: Investment Banks At Work. Harvard University Press, Cambridge. Economist. 2008. Confessions of a Risk Manager. The Economist, August 9: 72-73. Economist. 2012. An enlightening mistake. Economist, May 19: 79. Faerman, S.R., D.P. McCaffrey, D.M. Van Slyke. 2001. Understanding Interorganizational Cooperation: Public-Private Collaboration in Regulating Financial Market Innovation. Organization Science 12(3) 372388. Feldman, M.S. 2000. Organizational Routines as a Source of Continuous Change. Organization Science 11(6) 611-629. Feldman, M.S., B.T. Pentland. 2003. Reconceptualizing Organizational Routines as a Source of Flexibility and Change. Administrative Science Quarterly 48(1) 94-118. Financial Crisis Inquiry Commission. 2011. The Financial Crisis Inquiry Report. United States Government Printing Office, Washington. Financial Industry Regulatory Authority. 2012. FINRA Statistics. Financial Industry Regulatory Authority, Washington, D.C. Financial Services Authority. 2008. Final Notice: Credit Suisse International and Credit Suisse Securities (Europe) Limited. Financial Services Authority, London (August 13). Forrester, J.W. 1961. Industrial Dynamics. Productivity Press, Cambridge MA. Freeh, L.J. 2013. Report of Investigation of Louis J. Freeh, Chapter 11 Trustee MF Global Holdings Ltd., et al. . Morrison & Foerster LLP, New York. Fried, J., N. Shilon. 2011. Excess-Pay Clawbacks. Journal of Corporation Law 36(4) 721-751. Gallagher, D.M. 2012. Remarks at the 44th Annual Rocky Mountain Securities Conference, Denver (April 13). Gasparino, C. 2009. The Sellout: How Three Decades of Wall Street Greed and Government Mismanagement Destroyed the Financial System. HarperCollins, New York.

31

Gentin, P., L. Pedowitz, L. Thomsen, H. Washer, H. Weiss, M.J. White. 2011. Litigation Update: Regulatory and Criminal Securities Industry and Financial Markets Association Compliance and Legal Society 2011 Annual Seminar. Securities Industry and Financial Markets Association (SIFMA), Phoenix, AZ. Glover, J.M. 2012. The Structural Role of Private Enforcement Mechanisms in Public Law. William and Mary Law Review 53 1137-1217. Govtrack. 2012. Wall Street Reform and Consumer Protection Act. Govtrack, Washington http://www.govtrack.us/congress/bills/111/hr4173 . Hilgartner, S., C.L. Bosk. 1988. The Rise and Fall of Social Problems: A Public Arenas Model. The American Journal of Sociology 94(1) 53-78. Hill, C., P. Kelley, B. Agle, M. Hitt, R. Hoskisson. 1992. An Empirical Examination of the Causes of Corporate Wrongdoing in the United States. Human Relations 45 1055-1076. Hittinger, C.W., J.M. Bona. 2008. The Diminishing Role of the Private Attorney General in Antitrust and Securities Class Action Cases Aided by the Supreme Court. Journal of Business & Technology Law 4(1) 167-186. Ho, K. 2009. Liquidated: An Ethnography of Wall Street. Duke University Press, Durham. Hoffman, A.J., W. Ocasio. 2001. Not All Events Are Attended Equally: Toward a Middle-Range Theory of Industry Attention to External Events. Organization Science 12(4) 414-434. Hung, A.A., N. Clancy, J. Dominitz, E. Talley, C. Berrebi, F. Suvankulov. 2008. Investor and Industry Perspectives on Investment Advisers and Broker-Dealers. Rand Institute for Civil Justice, Santa Monica, CA. infogroup/ORC. 2010. U.S. Investors & The Fiduciary Standard: A National Opinion Survey (September 15). Jackall, R. 1988. Moral Mazes: The World of Corporate Managers. Oxford University Press, New York. Jarzabkowski, P. 2008. Shaping Strategy as a Structuration Process. Academy of Management Journal 51(4) 621-650. Jewell, M. 2008. Regulators Sue Lenders Over Mortgage Practices Albany Times Union, February 19: C1, C2. Johnson, S., J. Kwak. 2011. 13 Bankers: The Wall Street Takeover and the Next Financial Meltdown. Vintage Books, New York. Karmel, R.S. 2008. Should Securities Industry Self-Regulatory Organizations Be Considered Government Agencies? http://works.bepress.com/roberta_karmel/88. Karpoff, J.M., D.S. Lee, G.S. Martin. 2008a. The Cost to Firms of Cooking the Books. Journal of Financial and Quantitative Analysis 43(3) 581-611. Karpoff, J.M., D. Scott Lee, G.S. Martin. 2008b. The Consequences to Managers for Financial Misrepresentation. Journal of Financial Economics 88(2) 193-215. Keane, C. 1993. The Impact of Financial Performance on Frequency of Corporate Crime: A Latent Variable Test of Strain Theory. Canadian Journal of Criminology 35(3) 293-308. Kedrosky, P., D. Stangler. 2011. Financialization and Its Entrepreneurial Consequences. Ewing Marion Kauffman Foundation, Kansas City, MO. Khuzami, R. 2011. Remarks Before the Consumer Federation of America's Financial Services Conference. United States Securities and Exchange Commission, Washington (December 1).

32

Krawiec, K.D. 2012. Don’t “Screw Joe The Plummer:”: The Sausage-Making of Financial Reform. Duke Law School, Durham, http://scholarship.law.duke.edu/faculty_scholarship/2445/. Lange, D. 2008. A Multidimensional Conceptualization of Organizational Corruption Control. Academy of Management Review 33(3) 710-729. Langevoort, D.C. 1996. Selling Hope, Selling Risk: Some Lessons for Law from Behavioral Economics About Stockbrokers and Sophisticated Customers. California Law Review 84(3) 627-701. Langevoort, D.C. 2007. The Social Construction of Sarbanes-Oxley. Michigan Law Review 105(8) 18171855. Langevoort, D.C. 2011. Chasing the Greased Pig Down Wall Street: A Gatekeeper's Guide to the Psychology, Culture, and Ethics of Financial Risk-Taking. Cornell Law Review 96(5) 1209-1246. LaPorte, T.R., P.M. Consolini. 1991. Working in Practice but Not in Theory: Theoretical Challenges of "High Reliability Organizations". Journal of Public Administration Research and Theory 1(1) 19-48. Latour, B. 1986. The Powers of Association. J. Law, ed. Power, Action and Belief: A New Sociology of Knowledge? Routledge and Kegan Paul, London, 264-280. Lawrence, T.B., R. Suddaby. 2006. Institutions and Institutional Work. S.R. Clegg, C. Hardy, T.B. Lawrence, W.R. Nord, eds. Handbook of Organizational Studies, Second Edition ed. Sage Publications, Thousand Oaks, CA, 215-254. Lawrence, T.B., R. Suddaby, B. Leca, eds. 2009. Institutional Work: Actors and Agency in Institutional Studies of Organizations. Cambridge University Press, New York. Levinthal, D., J.G. March. 1981. A Model of Adaptive Organizational Search Journal of Economic Behavior and Organization 2 307-333. Ljungqvist, A., F. Marston, L.T. Starks, K.D. Wei, H. Yan. 2007. Conflicts of Interest in Sell-side Research and the Moderating Role of Institutional Investors. Journal of Financial Economics 86(2) 420456. Loomis, C. 1994. The Risk That Won't Go Away Fortune, March 7: 40-57. Louria, A. 2007. Money to Burn Investment Dealers' Digest, April 2: 15-19. Lukes, S. 2005. Power: A Radical View, 2nd ed. Palgrave Macmillan, London. March, J.G. 2010. The Ambiguities of Experience. Cornell University Press, Ithaca. March, J.G., M. Schulz, X. Zhou. 2000. The Dynamics of Rules: Change in Written Organizational Codes. Stanford University Press, Stanford, California. Masuch, M. 1985. Vicious Circles in Organizations. Administrative Science Quarterly 30(1) 14-33. McCaffrey, D.P. 2011. Regulatory Issues in Institutional Investment Management. H.A. Shawky, D.M. Smith, eds. Institutional Money Management: An Inside Look at Strategies, Players, and Practices John Wiley and Sons, New York, 13-33. McCaffrey, D.P., D.F. Andersen, P. McCold, K. Doa Hoon. 1985. Modeling Complexity: Using Dynamic Simulation to Link Regression and Case Studies. Journal of Policy Analysis & Management 4(2) 196216. McCaffrey, D.P., D.W. Hart. 1998. Wall Street Polices Itself: How Securities Firms Manage the Legal Hazards of Competitive Pressures. Oxford University Press, New York. McCaffrey, D.P., A.E. Smith, I.J. Martinez-Moyano. 2007. "Then Let's Have a Dialogue": Interdependence and Negotiation in a Cohesive Regulatory System. Journal of Public Administration

33

Research and Theory 17(2) 307-334. McCraw, T. 1984. Prophets Of Regulation. Harvard University Press, Cambridge. McKendall, M., B. DeMarr, C. Jones-Rikkers. 2002. Ethical Compliance Programs and Corporate Illegality: Testing the Assumptions of the Corporate Sentencing Guidelines. Journal of Business Ethics 37(4) 367-383. McKendall, M., I. Wagner, John A. 1997. Motive, Opportunity, Choice, and Corporate Illegality. Organization Science 8(6) 624-647. Miller, M.H. 1986. Financial Innovation: The Last Twenty Years and the Next. Journal of Financial and Quantitative Analysis 21(December) 459-471. Miller, S. 2012. Firms Face Challenges "Clawing Back" Compensation Society for Human Resource Management. Misangyi, V.F., G.R. Weaver, H. Elms. 2008. Ending Corruption: The Interplay Among Institutional Logics, Resources, and Institutional Entrepreneurs. Academy of Management Review 33(3) 750-770. Morrison, A.D., J. Wilhelm, William J. 2007. Investment Banking: Institutions, Politics, and Law. Oxford University Press, New York. New York Stock Exchange. 2006a. Exchange Hearing Panel Decision 05-169/170. New York Stock Exchange, New York (March 10). New York Stock Exchange. 2006b. NYSE Hearing Board Decision 06-156. New York Stock Exchange, New York (August 18). NYSE Regulation. 2012. NYSE Enforcement. NYSE Euronext, New York, http://www.nyse.com/DiscAxn/discAxnIndex.html. O'Neil, P.D., D. Krane. 2012. Policy and Organizational Change in the Federal Aviation Administration: The Ontogenesis of a High-Reliability Organization. Public Administration Review 72(1) 98-111. Oliva, R., J.D. Sterman. 2001. Cutting Corners and Working Overtime: Quality Erosion in the Service Industry. Management Science 47(7) 894-914. Parker, C., V. Nielsen. 2009. The Challenge of Empirical Research on Business Compliance in Regulatory Capitalism. Annual Review of Law and Social Science 5(1) 45-70. Parker, C., V.L. Nielsen, eds. 2011. Explaining Compliance: Business Responses to Regulation. Edward Elgar, Northampton, MA. Patterson, S. 2012. Dark Pools: High-Speed Traders, A.I. Bandits, and the Threat to the Global Financial System Crown Business, New York. Perin, C. 2005. Shouldering Risks: The Culture of Control in the Nuclear Power Industry. Princeton University Press, Princeton. Pfeffer, J. 1994. Managing With Power: Politics and Influence in Organizations. Harvard Business School Press, Boston. Project on Government Oversight. 2011. Revolving Regulators: SEC Faces Ethics Challenges with Revolving Door. Project on Government Oversight, Washington (May 13). Rasmussen, J. 1997. Risk Management in a Dynamic Society: A Modelling Problem. Safety Science 27(2) 183-213. Reason, J. 1997. Managing the Risks of Organizational Accidents. Ashgate Publishing Company, Burlington, Vt.

34

Rebonato, R. 2007. Plight of the Fortune Tellers: Why We Need to Manage Financial Risk Differently. Princeton University Press, Princeton. Reinhart, C.M., K.S. Rogoff. 2009. This Time Is Different: Eight Centuries of Financial Folly. Princeton University Press, Princeton. Repenning, N. 2000. Drive Out Fear (Unless You Can Drive It In): The Role of Agency and Job Security in Process Improvement. Management Science 46(11) 1385-1396. Repenning, N.P., J.D. Sterman. 2002. Capability Traps and Self-Confirming Attribution Errors in the Dynamics of Process Improvement. Administrative Science Quarterly 47 265-295. Richards, L. 2008. Frequently Asked Questions About SEC Examinations: Address to SIFMA Compliance and Legal Division General Luncheon Meeting, New York, NY. United States Securities and Exhange Commission, Washington (January 17). Richardson, G.P. 1991. Feedback Thought in Social Science and Systems Theory. University of Pennsylvania Press, Philadelphia. Richardson, G.P. 2001. Mapping versus Modelling: THE Answer to the Debate 19th International Conference of the System Dynamics Society. System Dynamics Society, Atlanta, GA. Roberts, K.H. 1990a. Managing High Reliability Organizations. California Management Review 32(4) 101-113. Roberts, K.H. 1990b. Some Characteristics of One Type of High Reliability Organization. Organization Science 1(2) 160-176. Roberts, K.H., S.K. Stout, J.T. Halpern. 1994. Decision Dynamics in Two High Reliability Military Organizations. Management Science 40(5) 614-624. Rudolph, J.W., N.P. Repenning. 2002. Disaster Dynamics: Understanding the Role of Quantity in Organizational Collapse. Administrative Science Quarterly 47(1) 1-30. Sastry, M.A. 1997. Problems and Paradoxes in a Model of Punctuated Organizational Change. Administrative Science Quarterly 42(2) 237-275. Securities Industry and Financial Markets Association. 2007. Research Report. Securities Industry and Financial Markets Association, New York (May 2). Securities Industry and Financial Markets Association. 2012. Key Industry Statistics. Securities Industry and Financial Markets Association, New York. Seligman, J. 2003. The Transformation of Wall Street: A History of the Securities and Exchange Commission and Modern Corporate Finance. Aspen Publishers, New York. Senior Supervisors Group. 2008. Observations on Risk Management Practices During the Recent Market Turbulence. Financial Stability Forum, Basel, Switzerland (March 6). Senior Supervisors Group. 2009. Risk Management Lessons from the Global Banking Crisis of 2008. Bank for International Settlements, Basel, Switzerland (March 9). Shapira, Z. 2011. "I've Got a Theory Paper--Do You?": Conceptual, Empirical, and Theoretical Contributions to Knowledge in the Organizational Sciences. Organization Science 22(5) 1312-1321. Shiller, R.J. 2012. Finance and the Good Society. Princeton University Press, Princeton. Société Générale General Inspection Department. 2008. Mission Green Summary Report [Translation from the French], Paris (May 20). Sterman, J.D. 2000. Business Dynamics: Systems Thinking and Modeling for a Complex World. Irwin

35

McGraw-Hill, Boston MA. Sterman, J.D., R. Henderson, E.D. Beinhocker, L.I. Newman. 2007. Getting Big Too Fast: Strategic Dynamics with Increasing Returns and Bounded Rationality. Management Science 53(4) 683-696. Sterman, J.D., N.P. Repenning, F. Kofman. 1997. Unanticipated Side Effects of Successful Quality Programs: Exploring a Paradox of Organizational Improvement. Management Science 43(4) 503-521. Stewart, J. 1991. Den of Thieves. Simon and Schuster, New York. Strauss, A., J. Corbin. 1998. Basics of Qualitative Research. Sage Publications, Thousand Oaks, CA. Taibbi, M. 2011. Why Isn't Wall Street in Jail? Rolling Stone, March 3: 44-51. Turan, E., J. Kasner, R. Pietrzak, J. Dickey. 2007. Recent Developments in Litigation. Securities Industry and Financial Markets Association Compliance and Legal Division 2007 Conference, Phoenix, AZ. Tyler, T.R., S.L. Blader. 2005. Can Businesses Effectively Regulate Employee Conduct? The Antecedents of Rule Following in Work Settings. Academy of Management Journal 48(6) 1143-1158. U.S. CFTC. 2012. Order: UBS AG, et al. U.S. CFTC, Washington. U.S. Court of Appeals for the D.C. Circuit. 2006. Philip Goldstein, et. al., v. Securities and Exchange Commission. United States Court of Appeals for the District of Columbia Circuit, Washington (June 23). U.S. GAO. 1997. OTC Derivatives: Additional Oversight Could Reduce Costly Sales Practice Disputes. U.S. GAO, Washington. U.S. GAO. 2009. Financial Regulation: A Framework for Crafting and Assessing Proposals to Modernize the Outdated U.S. Financial Regulatory System. U.S. GAO, Washington. U.S. GAO. 2011a. Securities and Exchange Commission: Existing Post-Employment Controls Could Be Strengthened. U.S. GAO, Washington. U.S. GAO. 2011b. Securities Fraud Liability of Secondary Actors. U.S. GAO, Washington. U.S. GAO. 2012a. Securities Regulation: Opportunities Exist to Improve SEC’s Oversight of the Financial Industry Regulatory Authority. U.S. GAO, Washington. U.S. GAO. 2012b. Securities Research: Additional Actions Could Improve Regulatory Oversight of Analyst Conflicts of Interest. U.S. GAO, Washington. U.S. House Committee on Financial Services. 2003. Mutual Funds: Who's Looking Out For Investors? United States Government Printing Office, Washington. U.S. House Committee on Financial Services. 2007. Hedge Funds and Systemic Risk: Perspectives of the President's Working Group on Financial Markets. U.S. Government Printing Office, Washington. U.S. SEC. 2012. About the SEC. United States Securities and Exchange Commission, Washington http://www.sec.gov/about.shtml . U.S. SEC Inspector General. 2008a. SEC Oversight of Bear Stearns and Related Entities: The Consolidated Supervised Entity Program. United States Securities and Exchange Commission, Washington. U.S. SEC Inspector General. 2008b. SEC Oversight of Bear Stearns: Broker-Dealer Risk Assessment Program. United States Securities and Exchange Commission, Washington. U.S. SEC Staff. 2011. Study on Investment Advisers and Broker-Dealers. United States Securities and Exchange Commission, Washington. U.S. Senate Committee on Homeland Security and Governmental Affairs. 2011. Wall Street and the

36

Financial Crisis: Anatomy of a Financial Collapse. United States Government Printing Office, Washington U.S. Senate Permanent Subcommittee on Investigations. 2013. JPMorgan Chase Whale Trades: A Case History of Derivatives Risk and Abuses. U.S. GPO, Washington. UBS. 2008. Shareholder Report on UBS's Write-Downs. UBS, Zürich, Switzerland (April 18). Vardi, Y., E. Weitz. 2004. Misbehavior in Organizations: Theory, Research, and Management. Lawrence Erlbaum Associates, Mahwah, New Jersey. Vaughan, D. 1998. Rational Choice, Situated Action, and the Social Control of Organizations. Law and Society Review 32(1) 23-61. Vaughan, D. 1999. The Dark Side of Organizations: Mistake, Misconduct, and Disaster. Annual Review of Sociology 25 271-305. Weaver, G.R., L.K. Treviño, P.L. Cochran. 1999a. Corporate Ethics Programs As Control Systems: Influences of Executive Commitment and Environmental Factors. Academy of Management Journal 42(1) 41-57. Weaver, G.R., L.K. Treviño, P.L. Cochran. 1999b. Integrated and Decoupled Corporate Social Performance: Management Commitments, External Pressures, and Corporate Ethics Practices. Academy of Management Journal 42(5) 539-552. Weick, K.E., K.M. Sutcliffe. 2007. Managing the Unexpected: Resilient Performance in an Age of Uncertainty, Second ed. John Wiley & Sons, Inc., New York. Weiss, D.M. 2006. Re-examining the SEC's Use of Obey-the-Law Injunctions. University of CaliforniaDavis Business Law Journal 7 239-283. Woo, D.M., K.J. Vicente. 2003. Sociotechnical systems, risk management, and public health: comparing the North Battleford and Walkerton outbreaks. Reliability Engineering & System Safety 80(3) 253-269. World Economic Forum. 2012. The Financial Development Report 2012. World Economic Forum, Geneva.

37