Which of the following statements best describes how the internal audit activity obtains reasonable assurance that significant risks in the organization are identified and assessed?
Who is held responsible for oversight of the organization's risk management framework?
It is important for the chief audit executive to consider the level of competence of the internal audit staff because their competence influences which of the following?
Which of the following is a preventive control the organization could implement to mitigate fraudulent activity in the accounts payable department?