What is required for punishments to significantly deter and otherwise affect corporate behavior? Is there research on that question?

I assume part of the answer is some ratio of corporate assets or revenue, as well as how the fines are implemented.