elaborate on the actions you would do based on the outcomes of a risk assessment that has revealed vulnerabilities in a vital process due to inadequate controls. What strategies would you employ to manage and interpret these findings? What concrete measures would you undertake? How might one effectively communicate these factual details to higher-ups or senior executives and the company's board? What more inquiries would you make in relation to this subject? Would the elimination of the process be justified due to the absence of adequate controls? What are the reasons for and against