Structuring Compliance Risk Identification Using the CORAS Approach: Compliance as an Asset | IEEE Conference Publication | IEEE Xplore