One of the challenges to demonstrating and maintaining your software in a state of compliance is a well-defined change control process. If you ask stakeholders to follow a change control process that’s ineffective, cumbersome or too complicated, people will find a way to bypass the process – and perhaps they should.