essentials of compliance and risk management