Question 442:
Which of the following should be the PRIMARY role of an internal audit function in the management of identified business risks?
Answer options:
A. Operating the risk management framework B. Establishing a risk appetite C. Establishing a risk management framework D. Validating enterprise risk management (ERM)