Sign a civility pact with your team: no interrupting, no sarcasm, no replying angry.

Every night 5 min: what did I do well, what wrong, what to improve?

Each policy override: log why, who approved, when reviewed.

30 days before audit: self-review controls — find gaps before auditor does.

Each team member: annual signature on disclosure of relationships affecting decisions.

All data: public/internal/confidential/restricted — each class with different protection rules.

Before signing: 12 red flags that may cost thousands later.

Test your confidential reporting channel yourself (not just theoretically) — is it actually anonymous, and did it respond the last time it was used?

Offer two acceptable options instead of a single command that breeds resistance.

Monthly review 3 questions about what actually gets time — kids or work.

Each month's start, search your name on Google and review the first 3 result pages.