What is the role of assurance actions and controls in the IACM?

They are focused on identifying and punishing non-compliant behavior within the organization

They are used to evaluate the management and governance controls with regard to achieving financial objectives

They provide additional information beyond management and governance actions and controls to evaluate subject matter

They are limited to financial audits and do not address other aspects of performance, risk, and compliance