THE CONNECTION BETWEEN COMPLIANCE AND BUSINESS RISK REDUCTION