For many Boards of Directors, compliance reporting feels familiar and reassuring. Dashboards are green. Policies are updated.