More on that message to RIAs: ‘evaluate’ your compliance programs