What immediate actions should the program manager take?

A global financial system is being delivered by the program learn to allow access from anywhere in the world Following a new cross-border regulation applying to privacy of local banking data accessed from abroad, the CEO of the bank requests that an external audit be conducted lo validate compliance with this new regulation. This event, which was not anticipated al this phase of the program, will generate additional work tor the program learn. This effort Is not included in the current program roadmap and benefits delivery plan

What immediate actions should the program manager take?
A . Negotiate with the CEO in an attempt to avoid the audit.
B. De-scope the capabilities of the system to not allow access from abroad
C. Accept the risk of the audit and continue the program as planned
D. Assess the impact of the audit and potential remediation on the program

Answer: D