Great art has never come from certainty. Neither, it turns out, does great compliance.
We had a list of questions prepared. We used almost none of them.
That, in a way, is the most honest way to introduce this conversation with Dirk Findeisen, Managing Partner at msg Rethink Compliance. We’d planned to talk about colour codes and technical frameworks. We ended up talking about Pop Art, an old German word for capability, and why modern compliance is less about designing the perfect framework than building an organisation that can continuously understand changing risk and act on it. Somewhere in between, a genuinely useful answer emerged to the question this whole series keeps circling: what does it actually mean to bring creativity into a discipline built on rules, control and caution?
A palette built for compliance
The Compliance exhibition inside this campaign is painted in calm turquoise, vibrant orange and earthy tones – control sitting right next to market intensity and real-world risk. It turned out to be a fitting place to start: Dirk’s answer to what that palette means for his day-to-day work doubled as his best short explanation of the job itself.
“Honestly, that palette is close to a job description. The turquoise is the part everyone assumes compliance is – controls, transparency, order. The orange and the earth tones are the part that never makes it onto a slide: constant, noisy, real-world risk that you’re managing fresh every day.”
Dirk FindeisenManaging Partner at msg Rethink Compliance
What he likes about the palette, he added, is that the colours sit next to each other rather than blending into one calm tone – which is, if anything, more honest than most compliance frameworks manage to be.
„Kunst“, „Können“, and a line borrowed from Sun Tzu
The obvious objection came next, and Dirk didn’t dodge it: compliance is, by design, the opposite of artistic license. It exists to constrain, not to improvise. Isn’t pairing it with “creativity” and “art” actually a contradiction in terms?
He began his answer by examining the meaning of the word itself. “Kunst” – the German word for art – is closely associated with “können”, the ability to do something, rather than simply “wollen” – wanting to – he said. It’s a small distinction with a big consequence: art, in this sense, is not only about beautiful brushstrokes. In a figurative sense, it’s about performance – whether an organisation can actually execute, at the pace regulation and risk now demand, using the resources, technology and data available to it.
“Art, in this sense, isn’t about intentions. It’s about capability – whether you can actually execute the masterstroke you promised. Think about a craft that takes years to master. The point is not inspiration alone. It is the ability to deliver consistent quality under changing conditions. Compliance needs the same reputation – not as an idea people believe in, but as a capability organisations are actually good at.”
Dirk Findeisen
It’s not so different, he added, from the strategic thinking associated with Sun Tzu’s „The Art of War” – not a canvas, but the discipline of reading what is coming, understanding the environment and acting early. Applied to compliance: watching where regulation and risk are heading, and moving before implementation becomes unavoidable. Too many organisations, in his experience, still move only once the deadline has become the strategy.
In organisational terms, that increasingly means allowing technology – including AI – to support prioritisation, pattern recognition and next best action, while keeping accountability explicit. The objective is not to automate judgement away. It is to augment decision-making in a way that remains explainable, governable and proportionate. Automation may support or execute decisions within defined boundaries, while accountability, oversight and escalation responsibilities remain clearly assigned.
The capability you have to rebuild every morning
If there is a “masterpiece” in compliance, Dirk’s version of it is not a finished framework. It is the capability to keep the framework effective as the environment changes. Many compliance functions still work reactively: something unusual appears, gets investigated and is classified after the fact. The challenge is not only the methodology, but also the shrinking time available to respond. Regulation, digital business models and financial crime are all moving faster, while simply adding headcount creates a cost curve few institutions can sustain indefinitely.
A living system, not a finished painting
Asked whether this capability was something you build once, Dirk reached for a different art form: a living installation – something that only works while it is maintained, observed and adapted.
It is a useful corrective to how compliance often gets discussed – as a system you implement and then leave running. Modern compliance has no meaningful finish line. Models drift, customer behaviour changes, regulations evolve and new typologies emerge. AI can help organisations detect and connect these changes, supporting more adaptive risk assessment, but without trusted data, governance, traceability and accountability it can just as easily automate yesterday’s weaknesses faster.
