In this bonus episode of Ethics vs the Law – same same or different, Bo Berndtsson reflects on the discussion around risk assessments and highlights an important aspect that is often overlooked: how to manage risks as they arise in the day-to-day business.

While structured risk assessments form the foundation of a compliance program, they are not enough on their own.

Businesses constantly face new situations – entering new markets, engaging new customers, or operating in high-risk environments – where risks need to be assessed in real time.

In this short episode, Bo shares practical insights on why companies need clear and robust processes for handling these situations, including when to involve compliance, who should make decisions, and what information is required to properly assess risk.

The key takeaway: a strong compliance program is not only about periodic assessments, but about making the right decisions at the right time, based on a clear understanding of risk and accountability.