Auditing and Compliance: Playing Defense is a Strong Offense