Can Generative AI Risk Assessment Transform Compliance?