Identifying, assessing, and prioritizing risks to an organization's regulatory compliance obligations.