There is no established template for documenting compliance risk. Each institution should develop a risk assessment that fits its risk profile. The components that are commonly used throughout the industry are as follows EXCEPT: