Describe a time you found a significant compliance gap during an internal walkthrough. How did you escalate it?