A compliance officer discovers that a business unit has consistently underreported a key risk metric for three quarters. What is the MOST appropriate first step?
-
A
Immediately escalate to the board without notifying the business unit
-
B
Conduct a root cause analysis to determine if it was intentional or a process failure
-
C
Amend all prior reports retroactively and file them with regulators
-
D
Terminate the responsible employees pending investigation