Identifying & assessing risks

You should adopt a risk-based approach to managing bribery and corruption risks. Your procedures should be proportionate to the risks faced by your organisation. No policies or procedures are capable of detecting and preventing all bribery and corruption, but a risk-based approach will help focus the effort where it is most needed and will have most impact. The fuller the understanding of the risks an organisation faces, the more effective your efforts to prevent bribery and corruption are likely to be.

This involves five steps:

1. •

   identify the risks you face

2. •

   assess the risks you face

3. •

   design and implement systems and controls to mitigate those risks

4. •

   monitor your systems and controls

5. •

   keep a record of what you have done and why