Assess regulatory compliance gaps and risks