According to the Standards, the Internal Audit Activity Must Evaluate

Multiple Choice

According to the Standards, the internal audit activity must evaluate risk exposures relating to which of the following when examining an organization's risk management process? 1. Organizational governance. 2. Organizational operations. 3. Organizational information systems. 4. Organizational structure.

A) 1 and 3 only
B) 2 and 4 only
C) 1, 2, and 3 only
D) 1, 2, and 4 only