Certified Internal Auditor (CIA) Part 2: Practice of Internal Auditing — Question 157

Which of the following statements regarding the risk management process' support of the internal audit activity is true?

Answer options

• A. The risk management process can provide more extensive internal audit services to the organization if it does not have an internal audit department.
• B. The risk management process supports internal audit by evaluating whether critical controls are adequate and effective.
• C. The risk management process can determine whether all significant risks have been identified and are being treated.
• D. The risk management process establishes an organization-specific, documented risk management framework.

Correct answer: C

Explanation

The correct answer is C because the risk management process is designed to identify and manage significant risks within an organization. Options A and B inaccurately describe the role of risk management in relation to internal audit, while D, while true, does not directly relate to the support of internal audit activities.