A risk-based approach was used to select the targeted sites, to consider how the Integrity and Compliance programme has been implemented, and if the associated procedures and controls were operating effectively in managing the risks key to that location.