This takes into account, for example, the results of regular corporationwide reporting on compliance risks in the governance, risk and compliance (GRC) system, the findings of investigations by the Corporate Audit department, and external sources such as Transparency International’s Corruption Perception Index.