legal risk management for CPG brands