Failure to comply can result in financial penalties, public naming by the regulator and increased scrutiny. Non-compliance can also expose organisations to reputational and governance risk.