According to IIA guidance, which of the following is not a responsibility of the chief...

Rating each engagement record to assess its relevance and accessibility for the organization's board.

Controlling access to engagement records, including access by senior management.

Developing retention requirements for engagement records that are consistent with organizational guidelines.

Forming policies governing the custody and retention of consulting engagement records before their release to other parties.