lDocument the policy and control environment

lAssign appropriate oversight of compliance management

lRequire personnel screening and access control

lEnsure compliance through training and communication

lImplement regular control monitoring and auditing

lConsistently enforce the control environment

lPrevent and respond to incidents and gaps in controls

Source: Forrester research: Seven Habits Of Highly Effective

Compliance Programs, by Michael Rasmussen