An organization is exploring various design options for a new compliance program. They are evaluating whether to accept, avoid, share, or control specific risks...