While there are many powerful reasons to implement strong internal compliance programs, the focus of this article is mitigating risk specifically created by external “bounty” programs. In that context, the more robust the internal compliance program, the less risk there is that an employee will go outside first to report a violation or potential violation.