How many people see Compliance weaknesses/issues in their daily line of work, but do not think it would be well-received if brought to the attention of management? Or have had the experience of it not being well-received if brought to the attention of management. (Not asking that you state the specifics of the problem here.)
I do have experience with that. My manager took me seriously but the issue was downplayed once it was escalated upstairs. It is a problem that still exists today, but fixing it would take a major system overhaul.
My theory is that either A. Management doesn’t know enough to ask the right questions, and/or B. Management doesn’t want to ask the right questions, because they know they most likely can’t fix the problems.