Staying compliant while proactively managing risks