Which of the following best describes the primary purpose of a compliance program within an organization?