The risk matrix presented in the first document must be prepared by each organization based on its own circumstances and structure, because this is the way to adopt prevention measures more efficiently, applying economic and human resources in the right measure to each risk based on its importance and probability of materialization.
The catalog of crimes that must be analyzed will be made up of those that may entail corporate criminal responsibility according to the Penal Code (not all of them).
Once the use case scenario has been presented in the second document, the applicable criminal Compliance crimes are identified, specifically considering technological crimes and including examples of possible crimes.
These documents are available to active CCI subscription members on the knowledge platform.
The document can also be purchased by requesting it from info@cci-es.org