Because of their size or the nature of their activities, smaller organizations may not have the same volume of standards to comply with as larger organizations. In addition, training and monitoring employee compliance can be much simpler, mitigating the possibility of poor compliance practices developing into a cultural norm – an issue more likely to affect larger organizations.