Which of the following statements presents an advantage of using risk and control self-assessments (RCSA) in the operational risk framework?
I. RCSA provides very accurate scoring of risks and controls due to its subjective nature.
II. RCSA program provides insight into risks that exist in a firm, but that may or may not have occurred before.
III. RCSA program can produce biased but transparent operational risk reporting.
IV. RCSA program allows each department to take ownership of its own risks and controls.