An initial organisational assessment

1. Regulatory Concept & Core Standards

In this video we will consolidate a skill: produce an initial assessment with priorities and evidence of compliance. Use the case to test what you would do in a similar situation. We will explain the proposed response step by step so that you can understand each choice and recognise when more information would be needed. The General Regime for the Prevention of Corruption, abbreviated as RGPC, structures prevention in covered entities. This course helps each person recognise risks and understand how organisational instruments relate to decisions at work.

An initial assessment compares applicable requirements with verifiable practice. It must distinguish missing documents, outdated documents and measures that exist but are not implemented. These situations require different responses. Priorities should reflect the risk, the unmet obligation and implementation capacity. An internal colour-coding system can organise the work, but it is not an official compliance assessment.

National rule: Law No 93/2021 protects reports of breaches within its scope, learned about in a work-related context, under statutory conditions. A breach of an internal rule does not automatically benefit from this regime. The RGPC establishes a separate framework for corruption prevention in covered entities.

2. Practical Implementation & Procedure

Gather the entity's legal assessment, PPR, code, training records and channel procedures. For each item, identify evidence, gaps, an owner and a proposed completion date. Perform a practical check, such as confirming channel access works. Record what was observed and what could not be verified. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A fictional company has a recent PPR, an old code and a broken reporting-channel link. Training records exist but do not identify the audiences covered. The team prioritises restoring the channel, checks the code and assesses training coverage without declaring the programme complete. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Should the assessment produce a folder of documents or a plan of verifiable actions? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

A plan of verifiable actions supported by the documents reviewed. Each gap needs an owner, a priority and evidence that it has been resolved. Proposed dates are management commitments and do not change applicable statutory deadlines.

One mistake to avoid is: marking a requirement as met merely because someone says it has been dealt with.

A report is automatically classified as protected because it contains the word corruption. What check is missing?

Read the facts and apply the national scope, context and conditions for protection. A form label helps organise information but does not determine the legal framework. If the case falls outside the regime, identify an appropriate route without unnecessarily disclosing information.