At TBS we have done an ethical risk assessment. And in the audit policy, there is a requirement for departmental audit committees to have an annual look at the departmental risk profile. They are supposed to have a conversation on values and ethics within the organizations. Departmental audit committees do this each year.
On November 30th, 2010. See this statement in context.