3.1 Plan and manage compliance