Compliance and Regulatory Bodies
Every industry has them in practically every geography: The need to have processes and procedures audited for the conformance of the organization to compliance requirements laid out by regulatory bodies.
If you study HIPAA, COPPA, PCI, ISO, SOX, etc, the industry specific elements aside, the underlying constructs are almost identical.
It boils down to Good Practices.
Work to enforce common sense. Instill the most basic aspects of discipline and good practices in your team. You will be surprised at how little you have to do to then conform to regulations. Save your organization time, effort, money and the trouble!