Compliance drift risk