Penalty for violation of the internal control provision

Do you think that the penalty for violation of the internal control provision and the books and records provision of the FCPA is stiff enough to motivate companies to implement systems capable of detecting bribes? What changes, if any, would you suggest to the FCPA?