Relation of input (influences on compliance) to output (that required security procedures are followed) is fairly direct
Input and output have a direct relation