Uncovering Critical Risks While Working Toward Compliance