Each organization undertakes a compliance self-assessment that covers four major areas for its business: legal and regulatory risk areas and supporting compliance programs; ethics and code of conduct activities and tone; controls environment and activities; and business continuity planning and preparedness.