Corporate board oversight of compliance program