Where Is My Company’s Code of Conduct? Why the Better Question Is Whether Employees Need to Find It

Most employees don’t know where their company’s Code of Conduct is.

That’s not just a usability issue. It’s a signal that the compliance program may not be designed for the moments when employees actually need it.

You completed your annual compliance training in February. You clicked through the Code of Conduct course, passed the knowledge check, and signed the acknowledgment form.

Now it’s September. A vendor offers to fly you to Mexico for a World Cup match—travel, hotel, and tickets included. It feels like too much. You want to check the policy.

Where do you go?

If you’ve ever had to stop mid-decision and think, “Where do I even find that policy?”, you’ve already experienced the gap this article is about.

Most employees genuinely don’t know. And that is not a small problem. It’s a window into how most compliance programs are built—and why they underperform in exactly the moments they were designed for.

Where It Usually Lives

The Code of Conduct is rarely hidden. In most organizations, it exists somewhere.

The problem is that “somewhere” is rarely where an employee would think to look in the middle of a real decision.

In practice, it typically lives in one of four places:

• The employee handbook or onboarding portal
  Employees received it on day one, signed a form, and haven’t opened it since.
• The company intranet
  Usually buried in a compliance, legal, or HR section. Hard to navigate. Often worse on mobile.
• The learning management system (LMS)
  Accessible during training, difficult to find afterward.
• The annual training acknowledgment
  Employees confirmed they read it. Whether they can find it again is a different question.

None of these are designed for the moment the Code of Conduct actually matters—when an employee is in the middle of a decision and needs to know what to do.

The Document Problem Is Actually a Training Problem

Making the Code of Conduct easier to find is a reasonable improvement.

A mobile-friendly link, a QR code, or a pinned intranet resource all help.

But the more important insight is this:

The employees who follow the Code in critical moments are not the ones who found the document. They are the ones who recognize the situation.

An employee who has practiced identifying a conflict of interest doesn’t need to look up the policy when a vendor offers an all-expenses-paid World Cup trip during an active bid. They already know what to do.

The training built the recognition skill.

The document is beside the point.

An employee who completed annual training in February and hasn’t revisited the topic since doesn’t have that skill. They have a completion record.

When the offer arrives in September, they will either:

• Guess
• Rationalize
• Or search for a policy they haven’t thought about in seven months

This is the gap most compliance programs fail to close.

A Program Designed for Audit vs. a Program Designed for Behavior

A Code of Conduct that employees can find but don’t remember is a program designed for audit.

A Code of Conduct whose principles employees recognize in real situations is a program designed for behavior change.

Those are very different outcomes.

What Continuous Reinforcement Actually Does

Annual training establishes the foundation. It explains the Code, outlines expectations, and defines policy areas.

It is necessary.

It is not sufficient.

Not because it’s poorly designed—but because of how memory works.

Information delivered once fades. Without reinforcement, most of what is learned disappears within weeks.

Continuous compliance training addresses this directly.

Not by repeating the annual course—which creates fatigue and disengagement—but by delivering short, targeted scenarios throughout the year.

A two-minute scenario in May—placing an employee inside a vendor hospitality decision—does something the February course cannot:

• It arrives closer to when the risk is real
• It requires active decision-making
• It rebuilds recognition before the next high-risk moment

The Employee Time Reality

There’s another reason annual-only programs underperform:

Employees don’t engage with them.

Not because they don’t care—but because they’ve seen it before.

They know:

• The structure
• The click pattern
• The knowledge check

They complete it. Then they move on.

A two-minute scenario is different.

It’s:

• Specific
• Relevant
• Interactive
• Brief

And sometimes, employees are genuinely unsure of the right answer.

That moment of uncertainty is where learning happens.

Respecting employee time isn’t a soft consideration.

It’s a compliance strategy.

What This Means for Your Program

For CCOs and L&D leaders, the question isn’t:

“Where does our Code of Conduct live?”

It’s:

“Six months after training, can employees recognize the situations the Code was designed to prevent?”

If the answer is uncertain, the solution isn’t a better intranet link.

It’s reinforcement.

A small number of well-designed, targeted scenarios delivered throughout the year can have a greater impact on behavior than a single annual course.

The Goal

The goal is not a Code of Conduct that employees can find.

It’s a Code of Conduct that employees carry with them—
accessible at the moment of decision, without having to search for anything at all.

How Xcelus Helps Close This Gap

This is where most compliance programs break down—and where scenario-based reinforcement changes the outcome.

Xcelus builds scenario-based Code of Conduct training designed to keep principles active between annual training cycles.

• Realistic, decision-based scenarios
• Focused on high-risk situations that employees actually face
• Delivered in short, targeted formats throughout the year

👉 See how Xcelus builds Code of Conduct training that reinforces decisions throughout the year →

Explore the training approach, browse scenario examples, or see how continuous reinforcement works in practice.