Compliance Risk Assessment and Management Process

Each Altria Group company is responsible for developing an annual compliance and integrity plan to meet the Altria Group Standards. These annual plans are based on a systematic risk assessment of potential legal, policy and reputation risks facing the company.

The Altria Group Chief Compliance Officer reviews each of these plans and provides guidance and recommendations for how to meet the Altria Group Standards. This helps our companies achieve their compliance and integrity objectives, while taking into account their unique characteristics and business risks.

The Altria Group Standards require each company to monitor, audit and evaluate the priorities established in the plans and risk assessment processes. These activities lead to specific action steps and promote continuous improvement.

Plans Lead to Actions

The annual plan and risk assessment process help Altria Group and its companies identify potential risks before they become potential compliance issues. When a company identifies a potential risk, it then works to address the issue by employing management strategies to mitigate the risk, such as communications, training and audits. Altria Group's companies develop web-based employee training courses to heighten awareness and identify the proper channels to use within the company to get guidance and support.

Related Information

Other Web Resources:

• United States Sentencing Commission’s Federal Sentencing Guidelines