risk management help reduce regulatory fine