Which of the Following Statements Is Correct Regarding the Assessment

Which of the following statements is correct regarding the assessment of risk in the annual audit planning process? 1. Activities requested by management should be considered higher risk than those requested by the audit committee. 2. Activities with lower budgets can be as high risk as those with higher budgets. 3. The potential financial or adverse exposure should always be considered in the assessment of risk.

A) 1 only
B) 2 only
C) 3 only
D) 2 and 3 only