premise: The organizations viewed risk assessments as opportunity, and identified risk areas were communicated throughout the organization.
hypothesis: The organizations did not communicate risk assessments outside the accounting department.