assessing compliance risks; reviewing and revising existing policies and promulgating policies based on new legal requirements or new business needs; and looking for increased opportunities for training and heightening awareness of compliance program objectives.