Under much recent legislation – the 2010 UK Bribery Act, for example – companies can use the existence of adequate controls as a defence, even when an offence has actually taken place. But the recent ...