Which of the following is the best action if an audit report recommends supplemental controls for uncritical functions?
a. Appoint a project lead to start the implementation
b. Eliminate the risk by purchasing risk insurance
c. Request a cost-benefit analysis to determine business need
d. Enhance the existing controls for critical functions