Good morning @oceansister! Answer D is correct.
Explanation:
The disclosure of fraudulent activities to parties other than the client's senior management and those charged with governance is not ordinarily part of the auditor's responsibility. However, in certain circumstances, a duty to disclose outside the entity may exist:
1) to comply with certain legal and regulatory requirements
2) to a successor auditor
3) in response to a subpoena
4) to a funding agency
5) to authorities
For those of you using Becker, it is on page A3-36 (middle of the page)