QUESTION $345$

An internal security assessor identified large gaps in a company's IT asset inventory system

during a monthly asset review. The assessor is aware of an external audit that is underway. In an

effort to avoid external findings, the assessor chooses not to report the gaps in the inventory

system. Which of the following legal considerations is the assessor directly violating?

A$.$ Due care

B$.$ Due diligence

C$.$ Due process

D$.$ Due notice