Understanding Risk Management and Compliance