It examines employee training and communications, risk measurement and mitigation, monitoring practices designed to expose misconduct, consistency in the application of disciplinary measures, and employee perceptions of the company’s ethics culture.