Imagine you observe a colleague (not a member of your immediate team) whose behavior might violate the firm's code of conduct or relevant regulatory guidelines. For example, you might notice them frequently using company resources for personal investment trades, or handling client information in a way that seems overly casual, potentially creating a compliance risk. How would you approach this situation? Walk me through your thought process and the specific steps you would take.