Effective Implementation of Compliance Management Systems: A Legal Perspective