Which of the following are true statements about compliance? (Hint: There are 2 correct answers). 1 point CCOs should conduct risk assessments before crafting risk management policies and procedures. CCOs should integrate themselves with and report to business units that face particular compliance challenges. To avoid confusion, CCOs should report to a singular person or entity, whether it be the CEO or a compliance committee. Tolerating employee misconduct threatens a company's attempt to create a "tone at the top" that is conducive to compliance