When testing the operational effectiveness of an institution's customer risk rating model an auditor finds...

Alert the person incharge of releasing the model that me release must comply with the specifications.

Check periodically if released rules are operating as per the specifications.

Set up a checkpoint before release to make sure that the release is in accordance with the specifications.

Tram KYC personnel to recognize errors in the customer risk rating model.

Report this matter to the board of directors.