Which of the Following Describes the Internal Control Component Risk

Multiple Choice

Which of the following describes the internal control component risk assessment?

A) Risk assessment is designed to ensure that the business's goals are achieved.
B) A company must identify its risks.
C) Internal auditors monitor company controls to safeguard assets, and external auditors monitor the controls to ensure that the accounting records are accurate.
D) Risk assessment is the 'tone at the top' of the business.