Compliance enforcement actions have long been used by regulators to push a licensee to comply and when severe enough, can be detrimental to the future success of a business. Commercial cannabis businesses may suffer disruptions in supply chain, loss of reputation and revenue among other things. A formalized risk program denotes a commitment to compliance and is strong evidence that the company did everything it could do to prevent non-compliance.