Policies are rarely the missing piece.
Compliance problems seldom occur because an organization lacks another policy document. They occur when regulatory expectations, daily operations, documentation habits, billing processes, and the way people actually work stop lining up with one another.
Closing that distance is the whole of our work. Sometimes it means building a program from the ground up. More often it means understanding why something drifted and helping an organization bring it back.