When interpreting ambiguous vendor audit findings, what approach best supports sound risk decisions?
-
A
Accept all findings at face value without context
-
B
Apply professional judgment combined with industry benchmarks and additional inquiry
-
C
Escalate every ambiguous finding to senior leadership immediately
-
D
Dismiss ambiguous findings as irrelevant to risk posture