Your Compliance Program Is Only as Strong as Its ... Shortest Plank

Long before compliance programs, dashboards, or regulatory frameworks existed, a German chemist was grappling with a deceptively simple question:

Why do some fields thrive while others fail—despite similar conditions?

In 1840, Justus von Liebig, one of the founders of modern agricultural chemistry, published research that quietly reshaped science. His conclusion was as elegant as it was counterintuitive:

Growth is not driven by abundance—but limited by scarcity.

Plants, Liebig showed, depend on a precise set of nutrients—nitrogen, phosphorus, potassium, and others. Adding more of what is already sufficient does nothing. Growth is constrained by the single nutrient in shortest supply.

This became known as Liebig’s Law of the Minimum—a principle that challenged the prevailing assumption that “more input equals more output.” Instead, it revealed that complex systems don’t behave additively. They behave as chains of essentials, and the chain breaks at its weakest link.

From Chemistry to a Barrel—and a Universal Law

The now-famous image of Liebig’s Barrel came later, popularized by scientists and educators who needed a visual metaphor powerful enough to stick.

Picture a wooden barrel made of uneven planks:

• Each plank represents an essential input

• Water is poured in

• The water level stops at the shortest plank

No matter how tall the others are, the barrel’s capacity is capped.

Raise any non-limiting plank—nothing changes.Raise the shortest one—and capacity immediately increases.

What began as a theory of plant nutrition proved remarkably portable. Over the next century, this logic spread across disciplines:

• Ecology: ecosystems constrained by limiting factors, not averages

• Medicine: a single vitamin deficiency undermines overall health

• Operations (Goldratt’s Theory of Constraints): throughput is governed by the bottleneck

• Engineering: system reliability depends on its weakest component

• Quality management: bottlenecks define performance, not effort

Across fields, the insight holds:

Complex systems succeed or fail at their weakest essential point—not their strongest.

Why Compliance Fits the Barrel Perfectly

Compliance programs are not single controls—they are interdependent systems.

Leadership, risk assessment, policies, training, third-party management, reporting, investigations, monitoring, incentives, and continuous improvement all function as essential “staves.”

No one element delivers compliance on its own. Each depends on the others.

Which leads to a blunt but necessary conclusion:

A compliance program is not judged by its best element—but by the weakest one that limits it in practice.

This is not theory—it is exactly how regulators think.

• The DOJ Evaluation of Corporate Compliance Programs (ECCP) asks whether programs work in practice

• The FCPA Resource Guide emphasizes effectiveness over form

• ISO 37301 explicitly defines compliance as an interconnected management system

A program can appear sophisticated—and still fail—because one essential element collapses under pressure.

So the real executive question is not:

“How strong is our program?”

But rather:

“Where is it weakest—and how much does that weakness cost us?”

1. The Illusion of Strength

Most organizations invest in what is visible:

• Polished Codes of Conduct

• High training completion rates

• Formal reporting channels

These are the tall planks.

But regulators—and reality—focus elsewhere.

A single weak element can quietly cap the entire system:

• Managers who override controls under pressure

• Training that informs but doesn’t change behavior

• A speak-up culture that exists only on paper

Insight: Compliance strength is not cumulative—it is constrained.

2. Finding the Shortest Plank

The challenge isn’t lack of data—it’s misdirected attention.

Shift from measuring activity to diagnosing constraints:

• Training effectiveness

  Are decisions improving—or just completion rates?

• Speak-up culture

  Are issues raised early—or discovered externally?

• Middle management behavior

  Are they reinforcing compliance—or quietly bypassing it?

Leading organizations increasingly adopt confidence metrics:

• Not “Did training happen?”

• But “Where do employees hesitate, misunderstand, or stay silent?”

Real-world observation:Organizations that supplemented digital training with targeted, face-to-face engagement (common in EFPIA-aligned programs) saw measurable improvements in judgment and escalation behavior.

Insight: The weakest plank is rarely hidden—it’s usually ignored.

3. Fixing the Constraint (Without Rebuilding the Barrel)

Liebig’s insight was practical: don’t rebuild the system—fix the constraint.

In compliance, this means:

• Identify the true limiting element

• Focus resources precisely

• Measure impact where it matters

Examples:

• Low trust in reporting → increase transparency and visibly enforce non-retaliation

• Weak training impact → redesign for decision-making, not information delivery

• Misaligned incentives → rebalance performance metrics with compliance outcomes

Regulators explicitly reward this approach. The DOJ looks for programs that adapt based on real weaknesses, not those that expand indiscriminately.

Insight: Precision beats expansion.

The Strategic Takeaway

Liebig’s Law transformed agriculture by dismantling a comforting myth: that more effort automatically leads to better results.

Compliance still struggles with that myth.

A program is not strong because it is extensive—it is strong because its weakest point has been addressed.

For executives, this reframes compliance entirely:

• From cost center → resource allocation discipline

• From obligation → risk prioritization engine

• From support function → strategic safeguard of reputation and growth

Before launching the next initiative, ask the only question that matters:

Are we adding another plank—or finally fixing the shortest one?