Which of the Following Is an Appropriate Role for the Internal

question 92

Multiple Choice

Which of the following is an appropriate role for the internal audit activity with regard to the organization's risk management program?

• A) Identify and manage risks in line with the organization's risk appetite.
• B) Ensure that a proper and effective risk management process exists.
• C) Attain an adequate understanding of the organization's key risk mitigation strategies.
• D) Identify and ensure that appropriate controls exist to mitigate risks.

---

Definitions:

Incrementalism

A policy-making process that involves small, slow, and gradual changes instead of large, rapid, or radical actions.

Civil Service

A sector of government composed mainly of career bureaucrats hired on professional merit rather than appointed or elected, whose role is the implementation of public policy.

Government Employment

Jobs within the public sector, covering positions at local, state, and federal levels, often including benefits and stability distinct from the private sector.

Legislation

Laws considered collectively, established by governing bodies to regulate, authorize, sanction, grant, declare, or restrict.