Which of the following should be the PRIMARY role of an internal audit function in the management of identified business risks?

A. Validating enterprise risk management (ERM)

B. Establishing a risk management framework

C. Operating the risk management framework

D. Establishing a risk appetite








 

Suggested Answer: A

Community Answer: A



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.