I'll start with describing a risk-based compliance program, and then maybe Ms. Cabana can add to this.
What we would expect is that the corporation would have taken an inventory of the various legal instruments, whether it's laws, policies, regulations, directives, etc., that apply to them. Ultimately, there would be an assessment of whether or not the responsibilities are well understood for who owns that, risk mitigation assessments, the implementation policies and practices and ultimately reporting to the board on the carrying out of this function.
Ms. Cabana might be able to give you some specifics as to what we have seen, but, ultimately, having this information gives the board an understanding of how the corporation is addressing compliance risks.