It seems easy to post a cookie cutter policy on the wall, tick a couple checklists and feel the job is done. But compliance as the ultimate goal seems like a low bar. And we're starting to see the results