That, outside counsel told Bob, will require interviews, review of documents and transaction testing at a number of locations selected from an assessment process based on factors such as the volume of direct and indirect government sales, use of third-party intermediaries, country-risk profile, local licensing and other regulatory requirements, prior compliance issues and the absence of compliance