Compliance Monitoring Scheme: Risk-Based Assessment Framework - revision 2