The Department of Justice and the SEC have emphasized the importance of designing an anti-corruption compliance program based on a company's risk assessment. An effective program has to be tailored to the specific risks identified in the risk assessment. Companies that ignore this fundamental requirement are at increased risk of violations.