Skip to content

Book · By Stefan Gauci Scicluna

Key Compliance Models

The model was never the problem. HSBC had three lines of defence on paper. WorldCom had internal controls. AIG had a risk function. Each one had the model, and each one paid the price for not living it. Key Compliance Models is a desk reference that gathers fifty-eight essential models of governance, risk and compliance, the ones a working professional actually uses, and shows you how to make each one work when it matters.

Written by a training and compliance practitioner who builds and accredits courses for a living.

Key Compliance Models, a desk reference by Stefan Gauci Scicluna

The model was never the problem. Someone had it, and skipped it.

Almost every compliance failure in this book was not a failure of knowing the framework. It was a failure of running it. This desk reference takes fifty-eight models of governance, risk and compliance and does three things with each one: it explains the model in plain language, shows you when and how to use it, and anchors it to a real, sourced case, an organisation that either used the model well or paid for ignoring it.

Inside, you will learn how to apply

  • The Three Lines Model, COSO and ISO 37301.
  • The Fraud Triangle, Just Culture and conduct risk.
  • AML, sanctions, data protection and cyber security.
  • Bowtie, Swiss Cheese and root cause analysis.
  • Third-party risk, human rights and ESG disclosure.

Each model is anchored to a real, documented case, from HSBC and Wells Fargo to Boeing, Deepwater Horizon and Grenfell. Every figure in every case is checked against a primary or authoritative source. Where a number could not be verified, it is not in the book. Cases span UK, EU and US organisations.

Inside the book

Fifty-eight models across nine sections. Each model follows the same eight-part shape, so you can read one in a few minutes or study it in depth.

  1. Governance and GRC frameworks
  2. Risk management models
  3. Ethics, culture and conduct
  4. Compliance programme design
  5. Financial crime and anti-money laundering
  6. Data protection and privacy
  7. Information and cyber security
  8. Health, safety and environment
  9. Third party, ESG and emerging obligations

Every figure in every case is checked against a primary or authoritative source, with notes and sources at the end of each section.

Who it is for

Written for the people who have to make the models work, not just know they exist.

01

Compliance, risk and audit professionals

You run governance, risk or compliance for real, and you need the right model fast, with a case that shows what happens when it is used well or ignored.

02

Owners and managers who carry the risk

You answer when something goes wrong, without a large function behind you. This gives you the working models and the judgement to apply them.

03

Anyone who has to make the models work

If you already know the frameworks and need them to change what happens on the floor, not just sit in a policy, this is the desk reference for that.

What you take away

A working library of the models that decide whether a business is protected or exposed.

  • Fifty-eight essential models of governance, risk and compliance, each in plain language.
  • For every model, when to use it, how to use it, and what it delivers.
  • A real, sourced case behind each one, from HSBC and Boeing to Grenfell.
  • Figures checked against a primary or authoritative source, or left out.
  • A desk reference you can read cover to cover or reach for at the next hard decision.

Formats and details

Available on Amazon in three formats.

FormatsKindle, paperback, hardcover
Length264 pages
LanguageEnglish
Published17 September 2026

About the author

Stefan Gauci Scicluna is a training and compliance practitioner, a university lecturer and a doctoral researcher, and the founder of a professional training institute. He builds and accredits courses for employers and training providers for a living, and works with these models and cases every day, which is where the book comes from. It brings the same discipline he applies to client work into a reference you can keep on the desk.

Common questions

Straight answers about the book, who it is for and where to get it.

What is Key Compliance Models about?
It is a desk reference to fifty-eight essential models of governance, risk and compliance. For each model it explains what it is in plain language, shows when and how to use it, and anchors it to a real, sourced case of an organisation that used the model well or paid for ignoring it.
Who wrote it?
The book is by Stefan Gauci Scicluna, a training and compliance practitioner, university lecturer and doctoral researcher, and the founder of a professional training institute. It brings the same discipline he applies to client work into a desk reference.
Who is the book for?
Compliance, risk and audit professionals, and the owners and managers who carry the risk without a large function behind them. If you have to make the models actually work, it is aimed at you.
Is it a textbook or a working reference?
A working reference. Each model follows the same shape, so you can read one in a few minutes or study it in depth, and reach for the right one at the next hard decision.
Are the cases and figures reliable?
Every figure in every case is checked against a primary or authoritative source. Where a number could not be verified, it was left out. Cases span UK, EU and US organisations.
Where can I buy it?
The book is on Amazon in three formats: Kindle, paperback and hardcover. Use the Get it on Amazon link on this page.
What formats does it come in, and how long is it?
It is on Amazon as a Kindle ebook, paperback and hardcover, and runs to around 264 pages. Read it cover to cover for the overview, or reach for a single model when you need it.
Do I need to read it cover to cover?
No. Each of the fifty-eight models is self-contained and follows the same eight-part shape, so you can study the whole book or pull one model at the next hard decision.

Get the book

Key Compliance Models, on Amazon.

A desk reference you can read cover to cover or keep on the desk for the next hard decision. If you would rather talk about compliance training for your team, book a call and we will map it with you.

Available on Amazon in three formats: Kindle, paperback and hardcover.

Page updated .

We use HubSpot, Google Analytics, Apollo.io, the Meta pixel and the LinkedIn Insight Tag to see which businesses visit and which of our adverts work. Some of this data is processed outside the UK and EU. Nothing is stored on your device until you click OK. Cookie policy