In addition to employee reporting, in regions where there is a perceived higher risk of corruption, internal control and audit activities, as well as thirdparty due diligence also help identify risks of non-compliance.