Compliance program design