It’s all about people, not systems and compliance