Advanced Strategy: Where Your Real Regulatory Risk Sits — and How to Defend It