[NoPicklez]

As someone who works in compliance this absolutely.

Think of data breaches as an example, do you know how long you need to keep particular records for? Do you have a process to remove records once you no longer need them?

Additionally, businesses often need help in understanding the costs/risks with compliance vs non-compliance in order to direct their attention in the short term.