1. Identify relevant legislative acts: Conduct your own research and identify one or two acts or regulations that are relevant to the industry and nature of services of the organisation. For example, if you were creating a compliance risk management plan for a insurance company, the long term insurance act (LTIA) would apply to the organisation.