I am not sure I 100% agree that compliance is a outcome of incompetence. However I do agree that pretty much every company will hold onto an incompetent person

I am not sure I 100% agree that compliance is a outcome of incompetence. However I do agree that pretty much every company will hold onto an incompetent person until the money runs out. In my world, compliance is about offsetting risks, sure there are plenty of risks involving incompetence, but that is only one of the issues you need to address. Putting the spotlight on incompetence is going to cause you to miss other significant issues in your organization. Ultimately, lists and checking boxes are a long term solution to the classic "How do I do xyz?" "I dunno ask Bob he usually does that".