@Viss @paco The way I explain it to clients is we can tick every compliance box and still do a poor job managing risk. If we do a good job managing risk then compliance gets easy.