For example, our culture encourages self-reporting if noncompliance is suspected; and we recently created a “Watch List” for the board of direc tors that augments our enterprise risk management pro cess by identifying issues that could become material risks.