operationalizing compliance