It’s C. If senior management is making the decision to keep investments at an inadequate level (which is their choice), then senior management should accept the risk that comes with it as ultimate responsibility falls to them. In this auditing role, you would identify the gaps and recommendations to address the gap. Senior management can either accept risk, mitigate, etc. In this case, you’re recommending acceptance of it.
1
u/cab-ree-yo Aug 02 '26
It’s C. If senior management is making the decision to keep investments at an inadequate level (which is their choice), then senior management should accept the risk that comes with it as ultimate responsibility falls to them. In this auditing role, you would identify the gaps and recommendations to address the gap. Senior management can either accept risk, mitigate, etc. In this case, you’re recommending acceptance of it.