It would be naive to think that large organizations can, or should, do away with policies and metrics altogether. But they should be seen as complements to, rather than replacements for, the greater task of building the right kind of moral character in the organization.