Regulatory non-compliance risk mitigation