Manage risk & address compliance in the most efficient and effective way possible, holistically
Controls should be taken at the perspective of the entire risk framework
Ideally: design and implemented early, with reporting built in
Consider publishing checklists for researchers