CISA Question 415

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  While operating the risk management framework (Option C) is an important responsibility, it is typically the responsibility of management and the risk management function within the organization. Internal audit's role is to provide independent assurance and validation of the effectiveness of these processes, rather than directly operating them.

• Chose A1

  The PRIMARY role of an internal audit function in the management of identified business risks is to validate enterprise risk management (ERM). Internal audit validates the effectiveness of the organization's risk management processes, including the identification, assessment, and mitigation of risks.

• 1

  C. Operating the risk management framework