PMO compliance and risk reduction