which of these components are not considered during a risk-assessment audit to gauge the effectiveness of a firm's ethics programs? the financial bottom line. top management commitment. training programs. ethical policies.