Tagged compliance-risk-assessment