Good morning/afternoon, I would go with option A. in this scenario. B. is not an option as in highly regulated markets to expose the organization to risks could be monetary-wise and reputation-wise a disaster C. it will be hard to transfer such risks ...
A) Risk mitigation ------------------------------ Aleksandra Jankuc SAP Security & Compliance Consultant ------------------------------
A) Risk avoidance ------------------------------ Aleksandra Jankuc SAP Security & Compliance Consultant ------------------------------