law firm regulatory compliance operational controls SRA