Generative AI in Risk Management: Governance and Compliance