We have discussed this here multiple times. A good first start is, all companies should be registrants, and all of them shall be required to maintain compliance.