Which steps demonstrate a sound governance framework?

The human resources department places a notation in the employee files and accounts for it during performance evaluations.

Senior management provides the compliance officer access to resources to investigate the underlying cause of a violation.

The compliance officer updates the sanctions risk assessment to account for any underlying root cause of a sanctions violation.

The compliance officer reports to senior management on the sufficiency of the bank's governance framework as confirmed by the lack of penalty.

Senior management reinforces its zero-tolerance for sanctions violations and that it will hold officers directly accountable for any future violations.