CCTS compliance for obligated entities