Question $2$ Which on of the following statements is correct? A company should address all significant risk areas with the implementation of controls. None of the above statements are correct. A company should address risks in a company with the implementation of controls when evidence exists that such risks realised in the past. A company should address all risks, irrespective of the significance thereof, with the implementation of controls.