A subset of risk management that focuses on ensuring the business complies with legal and regulatory requirements.