Identifying & assessing risks

You should adopt a risk-based approach to managing bribery and corruption risks. Your procedures should be proportionate to the risks faced by your organisation. No policies or procedures are capable of detecting and preventing all bribery and corruption, but a risk-based approach will help focus the effort where it is most needed and will have most impact. The fuller the understanding of the risks an organisation faces, the more effective your efforts to prevent bribery and corruption are likely to be.

This involves five steps:

•
identify the risks you face
•
assess the risks you face
•
design and implement systems and controls to mitigate those risks
•
monitor your systems and controls
•
keep a record of what you have done and why

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Risk & Compliance News

NCSC annual review warns of escalating cyber threats and calls for increased vigilance

The National Cyber Security Centre (NCSC) has published its annual review 2024, revealing a significant increase in cyber incidents and sophisticated threats. NCSC's head, Richard Horne, emphasised the widening gap between cyber risks and the UK's defence capabilities. The review highlights state actors, particularly Russia and China, as major threats, while ransomware remains the most pervasive danger to UK organisations. The NCSC handled 430 incidents in the past year, up from 371, with 347 involving data exfiltration. The organisation issued 542 bespoke notifications, more than double the previous year, warning of potential cyber attacks. In response to these escalating threats, the UK government has announced a new Cyber Security and Resilience Bill to bolster protection of critical national infrastructure.

Severity of cyber risk 'widely underestimated' in UK

Law360, London: Britain is facing a 'widening gap' in its ability to dispute cyber threats and must improve its defences to combat the increasing severity and scale of hostile threats, the head of the country's top cyber security agency said on 3 December 2024.

EDPB approves certification criteria for EU Data Protection Seal under EU GDPR

The European Data Protection Board (EDPB) has approved the certification criteria for the EU Data Protection Seal, a mechanism to certify compliance with EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) in data processing operations, including transfers to third countries. This seal helps establish appropriate safeguards for data transfers, offering a uniform standard of assurance across the EU. It also specifies the roles of supervisory authorities, accreditation bodies, and certification bodies in maintaining consistent application of GDPR rules

Risk & Compliance weekly highlights—28 November 2024

This week's edition of Risk & Compliance weekly highlights includes: the new Risk & Compliance forecast, the latest sanctions news, the launch of a bribery investigation into defence firm Thales by the SFO and INTERPOL’s successful global operation against financial cybercrime.

View Risk & Compliance by content type :

News