Yes, rules needs to be in place, and standards implemented to ensure Compliance.