While a company's compliance department focuses on assessing and measuring risks and then testing the controls to manage them, the legal department is on the front end to define what those risks are—making the legal department the main adviser to the business.