governance risk compliance bibliometrics