Which of the following roles would be least appropriate for the internal audit activity to...

Identifying and prioritizing CSR issues that are important to the organization is a management responsibility because it involves strategy, stakeholder priorities, resource allocation, and risk appetite. Internal audit may advise, evaluate, or provide assurance, but it should not decide which CSR issues matter most. Consulting on design, advising on controls, and evaluating effectiveness can be appropriate if internal audit avoids assuming ownership. Option D is a classic assurance role. Option B is advisory but acceptable. Option A can be acceptable with safeguards, especially if internal audit later avoids auditing its own work or discloses impairment. The least appropriate role is making CSR priority decisions. Therefore, Option C is correct.