Companies are obliged to adopt and periodically review the appropriate internal means of control, compliance programmes and measures aimed at preventing and identifying corruption, developed in accordance with a risk-based approach.