Which of the following would not be a factor for senior management to consider when determining the internal audit activity's role in an organization's risk management process?
A) The extent to which the internal audit activity is outsourced.
B) The maturity level of risk management practices in the organization.
C) The competency of the internal auditors in risk management.
D) The nature of the business and the environment in which the organization operates.

Question

Quizplus · Accepted Answer

The extent to which the internal audit activity is outsourced is not directly related to determining the role of internal audit in risk management. The focus should be on the organization's needs and the internal audit's capabilities, regardless of whether it is outsourced.

Which of the Following Would Not Be a Factor for Senior