The UNDOC Anti-Corruption Ethics and Compliance Handbook for Business deals with the often sensitive and difficult area of engaging in risk assessment exercises to identify and address corruption. Why are these exercises so challenging in practice? How can a business ensure that its risk assessment exercises are effective despite the challenges? Are there any risks that companies can safely ignore? Are there risks that companies might not be able to effectively address inhouse?