Checklist For Bribery and Corruption Risk Assessment
Checklist For Bribery and Corruption Risk Assessment
Check List
Bribery and Corruption
Risk Assessment
CONTACT
DETAILS
Cristian Vera
Local Compliance, Risk and Sustainability Officers (LCRSO)
[email protected]
Organisations must now take fraud and corruption issues very seriously. The starting point is,
of course, the assessment of the risk of bribery and corruption.
The task seems daunting. However, by making use of the Bribery and Corruption Risk Assessment
Checklist, things can move a little faster.
Thus, we propose an agile methodology in which to list the good practices that should be
followed, the check on whether or not they are complied with, and the improvement action
required. For example, following a table such as:
1 Procedures
The procedures adopted by an organisation to counter the risk of bribery and corruption should be
proportionate to its level of risk. Procedures should include measures already in place to
strengthen governance and accountability and address fraud risks.
The organisation has a formal policy that emphasises zero tolerance We have Internal and
of bribery and corruption. Corporate Policies where the
primary objective is zero
tolerance to this type of events.
The organisation has a comprehensive set of policies that address We have Internal and
potential bribery and corruption risks, e.g. conflicts of interest, gifts Corporate Policies that address
and anti-fraud policies. potential bribery and corruption
risks.
The organisation has anti-bribery and corruption procedures in place We have anti-bribery and
commensurate with the risks identified and the size and corruption procedures in place
complexity of the organisation. according to the risks identified
and risk appetite according to
the reality of our division.
The organisation has clear and effective procedures in place for those The procedures for reporting
wishing to raise concerns about actual or potential bribery or any matters of concern are
corruption. clearly set out in the
Whistleblowing Policy and
Code of Conduct.
The organisation has procedures in place to create and reinforce The Risk and HR functions are
awareness, in particular with those exposed to a higher risk of bribery responsible for training
and corruption. employees on the provisions of
the Policies and instilling in
them a culture of accountability
and speaking up.
The organisation has strong controls in place such as separation of We have an adequate
duties and delegated levels of authority. segregation of duties as well as
application controls which are
evaluated by the internal and
external audit area.
The organisation has strong financial controls in place such as We have Corporate Accounting
transparent accounting records and the requirement for full supporting Policies, we also have a
documentation for all transactions. manual of accounting
accounts, and the balance
sheets of all our subsidiaries
are reviewed on a monthly
basis.
The organisation seeks to minimise or avoid the use of cash All transactions involving
payments. payments are carried out via
bank transfers with the
appropriate levels of
authorisation and approvals.
The organisation has strong internal and external audit functions We do not have a formalised
and an effective audit committee. audit committee, but every
Monday the different
management teams meet to
evaluate internal control,
sustainability and other issues.
The organisation has effective procedures in place to deal with any We have procedures in place
detected bribery or corruption, e.g. a fraud or bribery response plan. that define guidelines for
dealing with any bribery or
corruption that may be
detected.
As mentioned at the beginning, after reviewing compliance with good practices in policies and
procedures, where it is found that they are not being applied, actions for improvement should be
identified, planned and initiated. Similarly, in the following sections.
2 Commitment of Management
Those at the top of an organisation are in the best position to ensure that it conducts its business
fairly and honestly. Clear and visible commitment from top management is an essential element of
an ethical culture.
La The organisation is formally committed to integrity and business The Unifrutti Group ("UG") is
ethics. committed to ethical behaviour
and conducts its business
fairly, with integrity and
transparency in all its
geographic locations and
business operations.
The organisation has a Code of Conduct or similar document that The Group and divisions have
includes a clear statement against bribery and corruption. Codes of Conduct which is a
formal statement of principles
setting out the values and
ethical standards by which UG
is guided.
3 Risk Assessment
A risk assessment is key to establishing the bribery and corruption risk faced by an organisation. It
will also inform the proportionality of controls introduced to mitigate the risks identified.
The Directive or equivalent body oversees the risk assessment Risk assessment is monitored
process. and evaluated from the top
management of both UG and
the Divisions, using the
principle of Tone at the Top for
a clear Group commitment to a
strong compliance culture.
The risk assessment process includes consideration of the risk of Our risk assessment process
bribery and corruption. considers bribery and
corruption concepts within its
assessments and matrices as
assessment processes for our
control environment.
The risk assessment is documented and regularly reviewed. The risk assessment is carried
out on an annual basis and
documented in risk matrices
and assessment reports, which
are sent to the general
management.
The process for identifying bribery and corruption risk ensures that all For the bribery and corruption
key risks are identified. For example, by consulting with staff in all assessment process, we carry
areas of the business, in particular the higher risk areas. out a matrix assessment by
sensitive areas by performing
flow charts and process
walkthroughs to detect
potential risk drivers or triggers.
Positions at particular risk of bribery and corruption have been They have been identified
identified. according to a matrix
assessment including potential
positions that could be exposed
to bribery and corruption risks.
Bribery and corruption risk assessment has been used to inform In establishing procedures and
relevant policies and procedures. controls for the management of
bribery and corruption risk, UG
in each geographic location
considered internal and
external sources of potential
risks, local cultures, market
behaviours, regulations, etc., in
order to adopt relevant
proactive measures and
controls to properly assess
bribery and corruption.
Bribery and corruption risks have been assessed and prioritised so They are assessed on an
that mitigating controls can be appropriately focused. ongoing basis where timely
detection is prioritised,
mitigating controls are
determined considering that
they are within the range of the
risk appetite assumed by our
division.
4 Due Diligence
The application of due diligence in relation to the risk of bribery and corruption posed by associated
persons should be proportionate and risk-based. Due diligence can be applied to both external
partners and internal staff members.
There are procedures in place for the application of sanctions to third There are written procedures
party partners when incidents of bribery or corruption occur. mentioned in Corporate
Policies (Anti-fraud and Anti-
bribery Policy) and in the case
of our division there is the anti-
corruption law N°21.121, which
improves the legal framework
of bribery and bribery, whose
objective is to strengthen the
typification of certain conducts
and raise the penalties for the
main official crimes:
embezzlement, tax fraud,
incompatible negotiation,
bribery and bribery.
Due Diligence – Employees
The organisation's procurement process includes procedures to There are external and internal
ensure that it is fair, transparent and free from bribery and corruption. Corporate Policies in our
organisation which define the
guidelines to mitigate
Internal communication
The organisation has a clear anti-bribery and corruption policy and Management shall ensure that
procedures that are communicated in an accessible manner to all policy principles are adequately
employees. communicated to all Group
employees and key internal
and external stakeholders.
The organisation provides a safe, confidential and accessible means Confidential information
by which employees can raise concerns or seek advice in relation to channels are established
bribery and corruption risk, without fear of reprisal. through:
E-mail
Certified mail
Orally
An organisation's bribery and corruption risks may change over time, for example if it takes on new
functions.
A regular assessment of bribery and corruption risk is necessary to ensure that the compliance
programme remains fit for purpose.
Internal financial control systems are subject to regular reviews and All systems including financial
audits to ensure that they remain effective in combating the risk of control are subject to internal
bribery and corruption. and external audits on a period-
by-period basis to ensure that
controls are effective or that
more effective controls need to
be redefined if necessary.
There is a regular review of high-risk transactions, e.g. large-scale All high-risk transactions are
acquisitions or major planning decisions, to ensure compliance with reviewed on an ongoing basis
procedures and controls. to ensure that our employees
and corporate governance are
in full compliance with
procedures, policies,
instructions and others for an
adequate planning and control
environment.
There is a regular review of the number of fraud and High-risk transactions that
whistleblowing cases within the organisation, to determine whether require a more in-depth look
cases highlight any new bribery and corruption risks and analysis are raised when
warranted, and when reports of
irregularities are detected
through formal communication
channels, they are analysed
and reviewed with the source
documentation to see the
degree of materiality and
impact, if positive.
A periodic review of the register of interests is conducted to We carried out a division-wide
determine whether any new conflicts of interest may have arisen that survey of potential conflicts of
could leave an employee more susceptible to the risk of bribery and interest that may arise in
corruption. accordance with corporate
policy, and we have a record of
potential COI as indicated in
Appendix C of the current
Policy..
Employees, particularly those in high-risk functions, should regularly Procedures were established
confirm that they comply with anti-bribery and corruption agreements. that can be used by employees
and other stakeholders to
report directly or through the
hotline any suspicion of such
risks.
The results of the review activities are incorporated into reviews This is done on an annual basis
of systems controls and the strengthening of controls where by teams of external auditors
necessary. (PwC) where we are mentioned
in internal control letter the
weaknesses detected in
systems audits, when there is a
need to correct our division is
always ready to the best control
environment to ensure
traceability and transparency in
all processes.
7 Summary
As part of the ongoing commitment to best practices in corporate governance and risk management,
fraud prevention policies are established in order to promote the development of coordinated actions
to prevent and detect potential fraud, both internal and external, deter misconduct and encourage the
commitment of all employees and stakeholders to ethical and transparent conduct.
Taking into account the current regulatory context, which is clearly in a phase of growth and whose
most accentuated characteristic is dynamism, it is of vital importance to have a complete and effective
compliance model that allows organisations to identify and manage the main regulatory risks to which
they are exposed due to their activity, geographic location, etc.
Realised by:
Cristian Vera M.
Exportadora Unifrutti Traders SpA. (Chile)
Reviewed by:
XXXXXXXXXXXX
Exportadora Unifrutti Traders SpA. (Chile)
Versión N°1
June 2022
Winter 2022
Exclusive use of Unifrutti Group Administration 15