Although the prescription to base your compliance efforts on an assessment of risk is the most basic of common sense axioms, and although it applies generally to your entire compliance program, the Department of Justice has driven the point home and made it clear as well that an anti-corruption risk assessment is an absolute must-do.
FORBES: Risk Assessments: The Most Important Effort You're Doing All Wrong