The Board Has Asked the Internal Audit Activity (IAA) to Be

Multiple Choice

The board has asked the internal audit activity (IAA) to be involved in the organization's enterprise risk management process. Which of the following activities is appropriate for IAA to perform without safeguards?

A) Coach management in responding to risks.
B) Develop risk management strategies for board approval.
C) Facilitate identification and evaluation of risks.
D) Evaluate risk management processes.