Is Your Compliance Program Asking the Right Questions?