Using Risk Analysis to Enhance Compliance