The process of ensuring that the organization meets legal and regulatory requirements related to risk management.