I prefer CAMS more than ICA in view that you can attend many seminars to keep yourself up to date on current affairs. Bear in mind risk management is ever changing, what works in the past does not apply to the present. Your risk assessment requires broad depth of knowledge to work on. A law degree is only useful if you have the practical experience as it only helps in understanding the legal nuances of regulations.