Assess compliance risk by identifying obligation breaches, control gaps, and residual risk — then prioritize remediation. Use when ranking compliance priorities, scoping monitoring, or supporting risk committee reporting.
