The intersection of risk and compliance