What is the difference between a rules-based compliance program and a values-based compliance program? Can you have one without the other? Which provides greater flexibility? Which is more effective? Which way is the trend heading? Is it a good thing or a bad thing? Why? What are the pros and cons of rules-based and values-based programs?