The organizations viewed risk assessments as opportunity, and identified risk areas were communicated throughout the organization.
The organizations did not communicate risk assessments outside the accounting department.