Compliance Audit and Risk Evaluation Mechanisms