When we legislated this, we didn't think of conflict of interest as a growth industry, but maybe that's what happens.
The Auditor General recommended that departments do risk assessments to determine where the risks for conflicts of interest are highest and where related problems are to be found. This seems like good common sense. Have any departments gone down this road? Have they completed risk assessments? Which are they? Could you give me an example of how this search for the highest risks produces a good or bad result?