Which of the following options is a best practice for organizations to implement when creating...

A comprehensive ethics program should have structure, ownership, communication, training, monitoring, and enforcement. The CFE Fraud Prevention and Deterrence material identifies several components of an effective ethics program, including a designated ethics official, an ethics task force or committee, ethics training, reporting mechanisms, ethical behavior rewards and sanctions, and periodic evaluation. Option A is therefore correct. Option B is too restrictive because ethics policies and related expectations often need to be communicated to relevant external stakeholders, such as vendors or agents. Option C is incorrect because the program should consider how key stakeholders define success and ethical conduct. Option D is also wrong because sanctions for unethical behavior should be clear and consistently applied. Therefore, option A reflects a best practice.