Why is it that, despite heightened focus on corporate compliance, many firms are still failing to comply with regulation? And what can be done to curb such failures?