Based on the previously described norms and standards we as fobi solutions see an effective compliance management system built on the three fundamental compliance rules: PREVENT – DETECT – REACT. ‘Prevent’ means knowing your organisational risks and your legal framework. Based on that an organisation can set internal rules and codes of conduct, compliance trainings, compliance information for employees, etc. To then ‘detect’ any compliance issues within the organisation further mechanisms must be implemented, such as an internal control system, a whistleblowing program, risk-assessments, internal audits, etc. For any compliance problem or issue an adequate reaction must follow – the organisation must ‘react’ and therefore giving the employees trust in the compliance management itself and the confidence to act compliant with all rules and values.