Compliance and Risk Management Framework