In a highly regulated industry, how should compliance risks be weighted during risk-based engagement planning?
-
A
Identically to operational risks, with no special weighting applied
-
B
Excluded because regulators independently address compliance matters
-
C
Only considered if management specifically requests a compliance audit
-
D
Weighted heavily due to the severity of potential legal and financial penalties