Which of the following statements, if true, could justify an auditor’s decision not to report governance-related control deficiencies to the audit committee?
A. Management plans to initiate corrective action.
B. The board of directors has a separate corporate governance committee.
C. The amounts and the potential risks associated with the deficiencies are not material to the overall organization.
D. Governance issues are complex and the auditor should rely on management’s analysis of the extent of the problem.