Stop Checking Compliance Boxes: Start Measuring Proficiency to Drive Business Results