[This essay was originally posted on the Conflict of Interest Blog] Many years ago a client who was in the compliance department of a pharma company told me his strategy for conducting risk assessments.  He would schedule the…