Regulatory compliance and internal governance