Has the organization historically dedicated time, money, and resources to compliance efforts? If so, what groups have been involved in those efforts? Do the compliance, information technology,...

Has the organization historically dedicated time, money, and resources to compliance

efforts? If so, what groups have been involved in those efforts?

Do the compliance, information technology, finance, risk, legal, and internal audit

groups currently have a collaborative relationship? If so, is this formalized in a

council or committee?