Although many organizations’ IT departments have begun to focus on quickly adopting emerging technol­ogies, many of those organizations struggle to balance the need to deploy new technology with speed and agility while maintaining compliance with their organization’s traditional risk management frameworks. This struggle is why organizations adopting BaaS must shift from letter of the law (“box-checking compliance”) to spirit of the law (principles-based compliance) risk management (i.e., to risk-based methodologies whose foundational risk mitigation principles align with desired business outcomes).