When a compliance test reveals a gap between policy requirements and actual employee behavior, the root cause analysis should FIRST examine:
-
A
Whether the policy was communicated and understood by employees
-
B
How long the policy has been in existence
-
C
Whether a competitor organization has a similar policy
-
D
The total number of employees affected by the policy