Risk and compliance programs became more sophisticated last year, despite being deprived of adequate funding and staffing amid the COVID-19 pandemic.