There is one question that business folks always seem to ask technical folks, and it scares the heck out of me: “how can we force the user to comply with process XYZ?