Compliance in three key steps