Describe an effective method you have used to assess and manage compliance risks.