An employee requests an exception to a compliance policy for a specific business transaction. What is the best practice response?
-
A
Grant verbal approval to avoid creating a paper trail
-
B
Deny all exceptions without exception to maintain consistency
-
C
Follow a documented exception management process requiring appropriate approval and risk assessment
-
D
Allow the business unit head to decide without compliance involvement