Abstract: Bi-directional communication, through a computing system, may be used to maintain and monitor regulatory compliance. Employees of a firm may be prompted to provide information, which may be communicated to the computing system and stored in one or more databases. An internal auditor may be provided with a user interface that permits the initiation of audits, viewing of information reported, and/or the opportunity to provide findings and/or comments based on the information reported. The information reported may be provided to the auditor in the form of predetermined types of reports, based on the information reported.