Managing Risk in a Changing Regulatory Environment