Two confidential reports were found available to the public press after controls over confidentiality were found to be working as planned with compensating controls. These events revealed information that would not result in a significant loss to the company singularly or as combined. Therefore this event of two reports should be:
a. Not even considered an observation
b. Considered an observation and reported to the independent outside auditors.
c. Reported to senior management.
d. Reported to the audit committee
e. answers b, c and d are correct
f. Only answers b through c are correct
g. None of the answers, a through d, are correct