According to the text, the formal approval of the corruption risk map must be carried out by senior management, which drives the process by promoting a culture of integrity and approving the final document. This requirement is consistently examined during AFA inspections.

The text states that 85% of inspections closed in 2021 revealed a deficiency in the quality of this tool, demonstrating the complexity of producing a compliant risk map.

A corruption risk map is a regularly updated document designed to identify, analyse, and prioritise risks of exposure to corrupt solicitations according to business sectors and geographical areas. It forms the cornerstone of the anti-corruption framework according to the AFA.

The text states that the identification of inherent risks involves several complementary approaches, notably the top-down approach (starting from macro processes) and the bottom-up approach (relying on feedback from the field). The AFA recommends combining both methods for comprehensive coverage.

The text lists several common errors: partial coverage of activities, overly broad risk inventories without breakdown into elementary scenarios, desk-based preparation without involving operational staff, and insufficient remediation measures.

The text specifies that the top-down approach starts from macro processes and works towards detailed risks. The bottom-up approach, by contrast, relies on feedback from the field.

The text specifies that the Sanctions Committee indicated in its Imerys decision of 7 February 2020 that an update cycle of four years could be acceptable, as the law does not expressly require an annual update.

Sources of identification include the analysis of processes and the inventory of past incidents, while aggravating factors include high-risk geographical areas and the volume of transactions with public officials.