As a risk manager, you have been assigned to an organizational committee that has been asked to evaluate the organization and make recommendations to the compliance officer on way