Each organization undertakes a compliance self-assessment that covers four major areas for its business: legal and regulatory risks and supporting compliance programs; ethics and Code of Conduct activities and tone; internal control environment and activities; and business continuity planning and preparedness.