How implementing a stringent information management program can offset the staggering risks of non-compliance for a comparatively low cost