It's to anyone under managerial responsibilities. It could be a director, a senior leader, a CFO or a direct supervisor.
The moment we inform the employer of our findings, it reduces the risk for our members, because they flagged what they saw and they informed their appropriate chain of command of the anomalies or discrepancies they saw.