The board has asked the internal audit activity (IAA) to be involved in the organization's enterprise risk management process. Which of the following activities is appropriate for IAA to perform without safeguards?
The board has asked the internal audit activity (IAA) to be involved in the organization's enterprise risk management process. Which of the following activities is appropriate for IAA to perform without safeguards?
The internal audit activity (IAA) should evaluate risk management processes. This function falls under the typical responsibilities of the internal audit activity, which includes assessing and providing assurance on the effectiveness of risk management processes. Coaching management in responding to risks, developing risk management strategies, or facilitating identification and evaluation of risks are more aligned with management's responsibilities and would require safeguards to maintain objectivity and independence of the IAA.
To explain why is the answer is D