Rules & regulations
What you should & shouldn't do
Rules tell people what the organization has decided matters enough to enforce, and the gap between written rules and actual practice is one of the most honest readings of culture you can get.
Every organization has formal rules: policies, codes of conduct, procedures, compliance requirements. These are the things written down, agreed on, and in some cases legally mandated. They represent the organization's official position on what behavior is acceptable.
Then there is practice. Rules that everyone follows tend to reflect genuine shared values. Rules that are widely ignored reveal either that the rule was poorly designed or that the culture has moved on without the policy catching up. Rules that are selectively enforced are a particular problem: they create a two-tier system where some people are held to account and others are not.
New rules should come with a reason. When people understand why a rule exists, they are more likely to follow the spirit of it rather than just the letter, and more likely to flag it when the rule stops making sense.