Getting the balance right: investment in compliance versus business benefit