How We Evaluate Regulation Risk for Investors