Risk-based approach to managing compliance of AML/CFT obligations for CSPs