When conducting a sanctions compliance program assessment, which are the most important components in determining an organization’s sanctions risk? (Choose two....