Your organization's risk register is maintained by a single senior analyst who built custom scoring formulas undocumented outside his workstation. He announces his resignation with two weeks notice. The next quarterly risk review is in three weeks. What should you do FIRST?
A. Hire a replacement analyst before the departing employee's last day
B. Conduct an immediate knowledge transfer to document the scoring methodology
C. Postpone the quarterly risk review until a replacement is onboarded
D. Assign the risk register to the internal audit team as an interim measure