Which of the following should be the PRIMARY role of an internal audit function in the management of identified business risks?

• A.Establishing a risk management framework
• B.Validating enterprise risk management (ERM)
• C.Operating the risk management framework
• D.Establishing a risk appetite

Comment: *

Name: *

Email: *

Verification: *