Which of the following statements about operational risk awareness is correct?

It is good practice to collect and disclose incidents and near-misses for the future benefit of the professional community.

It is good practice to collect and analyze incidents and near-misses so as to set up preventive action plans for the future.

A report describing operational risks should be made at the request of the front office.

A report describing operational risks should be made at least once a year and provided to the front office.