compensation risk management