How technology and data can help reduce the costs of compliance and improve the effectiveness of controls