hr risk and compensation controls