Which of the following best illustrates the primary focus of a risk-based approach to control...

To evaluate controls regarding the computer security of an oil refinery.

To examine the processes involved in exploring, developing, and operating a gold mine.

To assess the likelihood and impact of events associated with operating a finished goods warehouse.

To link a financial institution's business objectives to a work unit responsible for the associated risk.