Which of the following is an appropriate role for the internal audit activity with regard...

Identify and manage risks in line with the organization's risk appetite.

Ensure that a proper and effective risk management process exists.

Attain an adequate understanding of the organization's key risk mitigation strategies.

Identify and ensure that appropriate controls exist to mitigate risks.