An Approved AI Tool Is Not an Approved AI Use

By |2026-09-01T15:17:00-06:00July 14th, 2026|AI, AI Ethics, AI Ethics and Risks, Compliance Blog, Data Privacy, Protecting Confidential Information, Todd's Blog|

Xcelus · Responsible AI & Governance An Approved AI Tool Is Not an Approved AI Use Your security review cleared the technology. It wasn’t clear what your people are putting into it. Quick answer: Approving an AI tool clears the technology. It does not automatically approve every data type, business purpose, or workflow that the tool is used for. Most organizations have published an approved software list and nothing else — so employees reasonably conclude that if the tool [...]

Comments Off on An Approved AI Tool Is Not an Approved AI Use

Why Good Companies Miss the Chance at a DOJ Declination

By |2026-06-30T17:00:32-06:00June 30th, 2026|Compliance Blog, Todd's Blog|

What is the biggest reason companies miss the chance at a DOJ declination? It is almost never a decision not to disclose, and it is rarely ignorance of the law. The most common reason a company loses the chance at a declination is internal speed: the report surfaces somewhere in the organization and then moves too slowly — stalling in an escalation chain, waiting on “one more fact” — so that by the time decision-makers can act, the window [...]

Comments Off on Why Good Companies Miss the Chance at a DOJ Declination

Reorganize, or Make Better Decisions?

By |2026-06-15T10:56:41-06:00June 15th, 2026|Compliance Blog, Todd's Blog|

Reorganize, or Make Better Decisions? The Variable Most Cross-Functional Failures Miss By Todd Corbett, Xcelus When something goes wrong across departments — a data breach that also involved employee misconduct, a harassment complaint that also created exposure to retaliation — the instinct at the top is almost always the same. Redraw the org chart. Add an escalation policy. Stand up a committee. Clarify who reports to whom. Those responses are legitimate. Sometimes, the structure really is broken and needs [...]

Comments Off on Reorganize, or Make Better Decisions?

Cybersecurity Runs Tabletop Exercises. Why Doesn’t Compliance?

By |2026-06-17T08:14:26-06:00June 9th, 2026|Compliance Blog, Todd's Blog|

Xcelus Blog — Compliance Leadership Cybersecurity Runs Tabletop Exercises. Why Doesn't Compliance? By the Xcelus Editorial Team Editor's Note The opening scenario below is the basis for one of our Executive Decision Lab™ kits, The Invisible Insider — a 90-minute facilitated session designed for public company leadership teams who want to practice these conversations before an incident forces them. Imagine your organization discovers that a vendor employee accessed confidential FDA approval information and shared it with a family member [...]

Comments Off on Cybersecurity Runs Tabletop Exercises. Why Doesn’t Compliance?

Why Your Leadership Team Needs Different Social Media Training Than Your Employees

By |2026-03-26T14:32:21-06:00March 26th, 2026|Compliance Blog, Todd's Blog|

Why Your Leadership Team Needs Different Social Media Training Than Your EmployeesMost organizations approach social media compliance training as a single program — one course, one policy, one audience. That approach misses the point entirely.The compliance risk a vice president carries on LinkedIn is fundamentally different from the risk a customer service representative carries on Twitter. Treating them identically doesn't protect your organization. It creates a false sense of coverage while leaving your highest-risk employees undertrained.A more effective approach recognizes [...]

Comments Off on Why Your Leadership Team Needs Different Social Media Training Than Your Employees

AI Acceptable Use Policy: The Five Decisions It Misses

By |2026-09-01T12:15:42-06:00March 16th, 2026|Compliance Blog, Todd's Blog|

Your AI Acceptable Use Policy Names the Tools. Employees Are Making Five Decisions It Never Mentions. Sarah works in marketing. She's preparing a presentation for an important client meeting the next morning. To save time, she opens a public AI tool and uploads a draft of the company's internal market analysis report. She asks the AI to summarize the document and generate a polished executive overview. Within seconds, the AI produces a clean summary that looks perfect for the [...]

Comments Off on AI Acceptable Use Policy: The Five Decisions It Misses

Why Employees Break Rules They Already Know at Work

By |2026-03-29T08:42:43-06:00March 6th, 2026|Blog/News, Compliance Blog, Todd's Blog|

Why Employees Break Rules They Already Know at Work If compliance were simply a matter of "knowing the rules," every company with a 98% completion rate would be 100% safe. But we know that isn't the case. When a major compliance failure hits the headlines, the investigation rarely finds that the employee "didn't know" the policy. More often, they knew the rule, they had passed the test, and they still made a high-risk decision. The question isn’t what they [...]

Comments Off on Why Employees Break Rules They Already Know at Work

Why Scenario-Based Training Improves Real Compliance Decisions

By |2026-03-29T08:50:30-06:00March 6th, 2026|Compliance Blog, Scenario-based Compliance Training, Todd's Blog|

Why Scenario-Based Training Improves Real Compliance Decisions Many organizations report high completion rates for compliance training, yet still encounter situations where employees hesitate or make uncertain decisions. This gap often occurs because training is completed months before employees encounter a real compliance situation. Scenario-based training focuses on the moment when employees must actually make a decision. Scenario-based compliance training helps employees practice recognizing decision moments before they encounter them in real workplace situations. Many employees complete annual compliance training [...]

Comments Off on Why Scenario-Based Training Improves Real Compliance Decisions

Why 98% Completion Isn’t Compliance | Scenario-Based Training

By |2026-03-29T08:46:29-06:00March 4th, 2026|Compliance Blog, Todd's Blog|

98% Completion Does Not Mean 98% Compliance Your compliance dashboard is glowing green. 98% completion. The Board is happy. But in a quiet conference room three floors down, a sales lead is about to backdate a contract. The 98% didn’t stop them. Many compliance programs report 95%–98% annual completion of Code of Conduct or policy training. This metric is vital. It reflects governance discipline, executive oversight, and administrative follow-through. It satisfies regulators and reassures auditors. But completion is not [...]

Comments Off on Why 98% Completion Isn’t Compliance | Scenario-Based Training

Smarter Course Design

By |2026-02-25T18:14:13-07:00April 30th, 2025|Blog/News, eLearning, Microlearning, Todd's Blog, Training, Xcelus|

Smarter Course Design for Busy Employees: Design With Respect Introduction: Getting caught up in delivering all the necessary information at once is easy when developing corporate training. After all, leadership, compliance, and HR often have a lot they want employees to know. But here's the truth: most employees aren't sitting at their desks with 90 minutes of free time, waiting for a course to launch. Respecting the reality of your employees' busy schedules isn't just polite — it's a [...]

Comments Off on Smarter Course Design
Go to Top