A company's compliance program includes policies, but a risk assessment has never been conducted. Which fundamental program element is missing?
-
A
Risk assessment
-
B
Written policies and procedures
-
C
Training and communication
-
D
Monitoring and auditing