Senior leadership is concerned about a recent trend of excessive exceptions to existing controls. Which of the following should be implemented to address this concern?

A. Continuous monitoring
B. Independent audits
C. A control library
D. Risk awareness training