Which of the following is an appropriate responsibility for the internal audit activity with regard...

Identifying and managing risks in line with the entity's risk appetite.

Ensuring that a proper and effective risk management process exists.

Attaining an adequate understanding of the entity's key mitigation strategies.

Identifying and ensuring that appropriate controls exist to mitigate risks.