. . . "However, a compliance program should be nimble enough to respond to new information or actions, such as mergers or acquisitions, divestitures or other external events." . .