4 Steps to Reducing Compliance Risk