A compliance officer discovers that a minor policy violation occurred two years ago but was never reported. The employee involved has since left the company. What is the most appropriate action?
-
A
Ignore it since the employee is no longer with the company
-
B
Document the finding, assess residual risk, and determine if disclosure to regulators is required
-
C
Retroactively discipline the former employee
-
D
Report immediately to law enforcement without further assessment