If management has not established a risk management process, the internal audit activity could.
A) Take a proactive role that supplements traditional assurance activities.
B) Identify and mitigate risks to the organization.
C) Assume responsibility for the management of identified risks.
D) Assume primary responsibility for determining if adequate and effective processes are in place.

Question

Quizplus · Accepted Answer

The internal audit activity can take a proactive role in advising and assisting management in establishing a risk management process, but it should not assume management responsibilities such as identifying, mitigating, or managing risks.

If Management Has Not Established a Risk Management Process, the Internal