Fundamentally this is the difference between 'organizations' and 'institutions'. In the former, the culture and operation are contained in the people who are part of the organization, in the latter the culture and operation are contained in the rules.

Institutions are much harder to set up, they require that you consider that evil people do evil things, so you have to set up rules and processes. The execution of those rules and processes have to span enough people that a conspiracy would be unlikely. It doesn't always work of course, people find ways to subvert institutions (the zero day exploits of their time).