This risk is managed through, among other things, group policies, site-specific procedures, online and faceto-face training, quarterly books & records review of payments, on-site compliance risk assessments, and awareness raising through briefs, newsletters and other communications.