What does risk management and compliance do? Compliance is concerned with ethical business practices and ensuring that the organization is doing what it is supposed to do, while risk management focuses on minimizing the potential impact of a crisis.