If the Law is the Hammer, What Else is in Your Compliance Toolbox?