Building a proactive compliance framework