An initial organisational assessment

1. Regulatory Concept & Core Standards

In this video we will consolidate a skill: produce a verifiable improvement plan. Use the case to test what you would do in a similar situation. We will explain the proposed response step by step so that you can understand each choice and recognise when more information would be needed. Prevention connects risks, conduct, controls and reporting. Assess the scope of the Estonian reporting Act separately from the Anti-Corruption Act. Risk-management examples are recommended methods. Each legal duty needs its own source and an assessment of the organisation’s role.

Initial assessment compares requirements with documents and practice. Missing instructions, outdated instructions and ineffective controls require different responses. Few reports do not establish trust or absence of problems. Selective checking supports only a limited conclusion.

Apply the following rule: TÕRTKS section 2 covers work-related information about EU-law breaches in listed fields, including procurement, EU financial interests, data protection and EU restrictive measures. It does not automatically cover every employment dispute or corruption concern. KVS section 6 contains separate corruption-reporting protection that must be assessed on its own conditions.

2. Practical Implementation & Procedure

Collect the legal assessment, procedures and operational evidence. Record impact, owner and remedy. Test access using fictional data. State what was and was not verified. Internal target dates do not replace statutory deadlines. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A company has a recent risk plan, an old code and a broken channel link. Training records do not show audience coverage. The team restores access, reviews rules and identifies who needs training. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Should the output be a document folder or a verifiable action plan? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

A plan supported by reviewed documents and tests. Each gap needs an owner and evidence of resolution. File counts do not demonstrate effectiveness.

One mistake to avoid is: marking compliance solely on a verbal assurance.

Now apply the national rule to a second decision. A report is automatically called protected because it contains the word corruption. What check is missing?

Check the work-related connection, facts and TÕRTKS sections 2,3 and 13. Assess KVS section 6 separately where relevant. A form label does not confer every right. Identify an appropriate alternative route and limit disclosure if another procedure applies.