A compliance plan comes down to judgement calls, not technical ones. How to set the audience, the monthly training budget and the start date.