Under the Bribery Act 2010, a commercial organisation commits an offence if it fails to prevent bribery. What is the only statutory defence available to the organisation?

The bribery was committed by a low-level employee without management knowledge.

The organisation had in place 'adequate procedures' designed to prevent bribery.

The bribe was paid in a foreign jurisdiction where such payments are customary.

The organisation reported the bribery to the authorities immediately upon discovery.