Use “public hangings” to deter bad behavior. No matter how carefully you design your controls and how rigorously you enforce them, malicious and grossly negligent people will sometimes find a way around them. So when you catch someone violating your rules and controls, make sure that everybody sees the consequences.

Have the clearest possible reporting lines and delineations of responsibilities. This applies both within and between departments. Dual reporting causes confusion, complicates prioritization, diminishes focus on clear goals, and muddies the lines of supervision and accountability—especially when the supervisors are in two different departments. When situations require dual reporting, managers need to be informed. Asking someone from another department to do a task without consulting with his or her manager is strictly prohibited (unless the request will take less than an hour or so). However, appointing co-heads of a department or a sub-department can work well if the managers are in sync and combine complementary and essential strengths; dual reporting in that case can work well if properly coordinated.

Assign responsibilities based on workflow design and people’s abilities, not job titles. Just because someone is responsible for “Human Resources,” “Recruiting,” “Legal,” “Programming,” and so forth, doesn’t necessarily mean they are the appropriate person to do everything associated with those functions. For example, though HR people help with hiring, firing, and providing benefits, it would be a mistake to give them the responsibility of determining who gets hired and fired and what benefits are provided to employees.
