5 big compliance lessons from recent SEC cases