This paper applies a 'Risk based approach' drawing primarily on the OECD and World Bank text lined. This analysis draws also an practical experience in a state owned enterprise. The analysis shows the utility of the referred models and also demonstrates as a practical matter that these models can be applied effectively outside a purely private environment. The analysis serves as a first step to possible application of these compliance models which were developed primarily for use in Private sector-to-Public sectors.