How can compliance programs be beneficial to a company when management feels there is no risk for the business operation? How would you retain management’s support of a compliance program for a firm based in the US but operating in multiple countries?