connect risk with controls and training
1. Regulatory Concept & Core Standards
This video's topic is elements of prevention. By the end, you should be able to connect risk with controls and training. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Prevention connects risk, conduct, controls and reporting. First identify the particular organisation’s duties. Public-sector prevention rules and private-entity channel duties have different conditions. Assess a document together with evidence that it works.
Risk assessment identifies a weakness, conduct rules guide action, training tests it and reports may reveal failed controls. Call an element mandatory only with an applicable provision.
Apply the following rule: Article 8 distinguishes guarantees available from receipt and measures requiring status granted by the Prosecutor’s Office. Rewards and compensation are not automatic. Corruption Prevention Act duties depend on the entity and specific provision. Rules for independent institutions and other public-sector entities differ. A teaching risk matrix is not an official compliance assessment. Portugal’s RGPC does not apply as Lithuania’s national law.
2. Practical Implementation & Procedure
Trace a supplier-selection risk through controls, the code and training. Test reporting access and determine how findings will improve prevention. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
At each step, compare the information available with what is still needed for the decision. Arrange continuity when the designated worker is absent. A substitute receives only the information needed for the task, and their actions must remain verifiable.
Mark an unanswered question as a fact to verify. Identify who could confirm it and what access they actually need. A correct exercise choice alone does not show that the reasoning is understood. If the answer depends on an additional fact, state that condition explicitly.
For the workplace task, name the person who can approve the change and the person who will check that it works. Produce a concrete verifiable action, rather than only a promise to follow rules. Check effects on access rights and user information. Record questions that your organisation still needs to resolve.
3. Case Study & Compliance Action
An organisation has selection criteria and conflict declarations. A report alleges criteria were bypassed. The review checks whether a second approver actually examined the documents. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
The exercise is as follows: What is missing if a code exists but nobody finds the channel? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
The connection between the rule and a functioning procedure. Fix access and explanations and test actual use. Documents alone do not prove effectiveness.
One mistake to avoid is: equating documents with a working system.
Now apply the national rule to a second decision. An organisation says every teaching matrix is a Lithuanian legal requirement for everyone. What should be corrected?
Distinguish specific Corruption Prevention Act duties from teaching methods. For example, Article 13’s code requirement for an independent institution is not an identically formulated duty for every private company. Link each legal statement to its addressee and source. For a chosen method, identify the risk reduced, owner and operating evidence. Completing a course does not replace a compliance review.