If appropriate safeguards exist, which of the following is considered a legitimate internal audit role within risk management at an organization?
Imposing risk management processes.
Providing consolidated reporting on risks.
Taking accountability for risk management.
Making decisions on risk responses.
Submit