The objective of this analysis was to determine, on the basis of the risk profile of ZF, whether the maturity level of ZF, i.e. the design, adequacy, and functioning of the Compliance Management System (CMS) is appropriate.