At a time when federal regulators are tossing cash at whistleblowers like parade floats hurling candy at kids, legal chiefs need to ask more questions about potential risks and think about continuously improving their corporate compliance practices.