One of the biggest challenges companies face when evaluating a compliance program is finding ways to measure quality and effectiveness. Often, companies focus on quantitative measures which can be easy to collect but lacking in insight. Many such metrics, like the number of trainings or dollars spent on compliance, offer little information on how effective a program is at achieving its goals. Because quality can be so challenging to measure, many companies just do not do it, which can leave them at risk. This article, the third in a four-part series, provides specific methods companies can use to measure the quality of their program and the strength of their compliance culture. See “Developing Key Performance Indicators and Tracking Metrics Using ISO 37001 (Part One of Two)” (Nov. 9, 2016); Part Two (Nov. 23, 2016).