The hardest thing with compliance is translation between engineering speak and compliance speak. Few engineers understand the whack-a-mole game of change control, but they understand how to design immutable infra.