Risk-Based Approach to CSV: Simplifying Compliance