Have you recently analysed your internal policies and procedures to make sure not only they are compliant with regulations but also effective? We all know that if you don’t include enough controls you land in hot water with the regulator. However, too many, and you risk being in breach of your own requirements. Think of your policy manual like traffic lights. Too many controls and the flow of traffic grinds to a halt. Too few, and eventually someone gets hurt.