How to conduct compliance risk assessment

nt