Câu 176: IIA-CIA-PART2: Certified Internal Auditor - Part 2 Conducting the Internal Audit Engagement

Which of the following is an appropriate responsibility for the internal audit activity with regard to the organization's risk management program?

1. A. Identifying and managing risks in line with the entity's risk appetite.
2. B. Ensuring that a proper and effective risk management process exists.
3. C. Attaining an adequate understanding of the entity's key mitigation strategies. — đáp án hiện tại
4. D. Identifying and ensuring that appropriate controls exist to mitigate risks.