Koko’s experience offers several lessons for organisations operating in an increasingly complex regulatory environment.