“Compliance” is a word I’m not a fan of. The reasons are many, but the most important reason is that it puts people into the mindset of “What am I required to do?” vs. “What should I do?” – and the latter mindset is the true path to risk mitigation. When it comes to the …