It’s all about the ‘management of compliance’