Regulatory compliance has become the critical boardroom issue of the decade. Organisations that fail to comply with the major pieces of legalisation or industry regulations face stiff fines and – depending on the sector – sanctions such as their exclusion from capital markets, the prosecution of their senior executives or even the withdrawal of their right to engage in business. The task for the IT organisation is to support that compliance challenge.