This takes into account, for example, the results of regular corporatewide reporting on compliance risks in the governance, risk and compliance (GRC) system, the findings of investigations by the Group Audit department, and external sources such as Transparency International’s Corruption Perception Index.