EB25/R03 – Policy to address risk of wrongdoing