The Chief Executive Officer Has Requested That the Chief Audit

The chief executive officer has requested that the chief audit executive (CAE) coordinate the establishment of an enterprise risk management (ERM) program for the organization. Which of the following would be the most appropriate action for the CAE?

A) Accept the request as the role of coordinating ERM is a core function of internal audit.
B) Decline the request as this role compromises the CAE's objectivity.
C) Accept the request after consulting with the board and adhering to proper safeguards.
D) Decline the request as internal audit has limited knowledge and experience of risk at the enterprise level to undertake the assignment.