Do you think that projects that are needed to comply with regulations, such as the international anti-money-laundering (AML) laws that require firms to know your customer (KYC), should undergo the same approval requirements as discretionary projects, such as in manufacturing or marketing? Explain your reasons.