When testing the operational effectiveness of an institution's customer risk rating model an auditor finds that the risk rating is not in accordance with the model specification in some cases.After interviewing developers andofficers,the auditor learns the specification document is inaccurate and has not been updated in a timely manner.Which are appropriate corrective action plans'? (Select Two.)
Submit