Regulatory compliance focuses on requirements—laws, rules, grant terms, and policies. Internal controls are the routines, approvals, documentation, and monitoring that keep those requirements from failing in practice. Strong governance connects both: clear responsibility, consistent evidence, and reliable reporting that stands up to oversight.