Which actions would help BuildSphere address the governance gaps found by its internal audit? Select ALL correct answers.

### Why this is right - **A** is correct: adopting a governance framework is one of BuildSphere's stated improvement priorities. - **B** is correct: the audit found undefined leadership roles, and defining them directly addresses that gap. - **C** is correct: integrating cybersecurity into audits is also a stated focus for improvement. ### The concept An audit can identify whether an organization has established roles and governance processes. A framework can give structure to those processes, while defined roles clarify who makes and carries out decisions. The company's government contracts also create a cybersecurity standards obligation even though the profile describes few sector-specific regulations. ### The other options - **D. Leave leadership responsibilities undefined to preserve flexibility**: this repeats the condition the audit identified as a risk. - **E. Assume that minimal sector regulation removes the need for governance**: BuildSphere's government contracts require compliance with a cybersecurity standard, and governance is needed to manage its sensitive projects. ### Terms - **Internal audit**: An organizational review that can identify gaps in controls, governance, or compliance. - **Framework**: A structured set of guidance used to organize cybersecurity processes and communicate posture. ### Remember An identified accountability gap calls for defined ownership, not less definition.