A cooperative arrangement and method to monitor behaviors and other activities by an individual in an organization. Personal financial information associated with an individual who is associated with, or to be associated with, the organization are obtained. Information is extracted from the personal financial information and input into a risk assessment algorithm. The risk assessment algorithm operates on the input information and generates risk assessment data. The risk assessment data is evaluated to make a determination of certification with respect to the individual. A decision to certify means that the risk associated with the individual, with respect to committing fraud or some other improper act with respect to the organization, is acceptable. Risk assessment data on a plurality of key individuals within the organization may be generated and evaluated to make a determination of certification with respect to the organization as a whole.