The New Legal Structure of Risk Control