Tell me about a time you identified a compliance risk that others had missed. How did you research and validate it?