For those of you who have to report on compliance risk (such as a quarterly report to exec mgt) what are you using for KRIs to measure compliance risk? I know there are easy ones, such as # of Complaints; % Complete for Training; but what are some of the other ones you're using? Appreciate the insight.

Transaction volume, changes in regulations, prior (exam, audit, review) findings, change in systems, personnel's experience, management/Board oversight, regulatory climate. And in harmony with Sony and Cher - "The Beat Goes On!"

Thank you.