regulatory compliance for CIOs