IAM compliance: Know the system controls at your disposal