We are working to transition from a compliance focus to a risk focus, where we know all our risks, have specific controls in place to minimize them and continuously measure and improve risk-reduction.