Getting a Better Handle on Compliance and Controls