A compliance management system comprises of the compliance program and the audit function. IT compliance program encapsulates the policies, procedures and training. Audit functions are deployed as a monitor to check for compliance on a regular basis. There are independent audit groups that conduct external compliance audits. In this way unbiased judgment on the actual compliance state can be known. Internal audit groups need to coordinate with external agencies to plan for these kinds of audits on a half yearly basis.

Internal controls are necessary to ensure continuing compliance to the business. A global compliance specialist for the organization is necessary to manage the growing population of customers, employees and enterprise information. Every transaction has to be scrutinized to check for updates and changes. Compliance articles on the Enron issues will explain how breach of controls has affected the organization. Institutionalizing compliance is the only way to combat any risk that may arise in the long run.