In a process risk assessment, 'inherent complexity' of a process step is considered because higher complexity typically:
-
A
Reduces the cost of control implementation
-
B
Increases the likelihood of human error and the need for stronger controls
-
C
Automatically triggers regulatory reporting requirements
-
D
Decreases the frequency of control testing needed