U.S. Department of Justice released updated guidance in 2020 to convey what an effective compliance program requires, and reaffirms that an “off the shelf” program that merely exists on paper will not benefit an organization that is under investigation by the DOJ. It sets forth the DOJ’s expectation that an effective compliance program should evaluate and revise the risks on an ongoing basis.