Check risk assessments and mitigation plans for recommendations applicable or related to compliance. A mitigation plan may be identified that should be considered and possibly implemented as a compliance control.