Compliance is the process by which organisations identify and meet their strategic obligations whether arising in law, standards, codes or from stakeholder expectations.

Focusing on legal obligations in isolation results in a minimalist and narrow approach, which cannot leverage an organisation's ability to efficiently manage all aspects of compliance risk.

The Board should articulate the compliance philosophy and ensure adequate seniority, level of authority and support is given to the compliance function.