A multifaceted risk in which violations of laws and regulations cannot be completely eliminated even with internal controls and compliance systems in place, while changes in regulations or their interpretation may result in additional costs and reduced organizational response capabilities.