Which of the following best describes the approach the internal audit activity should take to...

To evaluate an organization s governance processes for making strategic and operational decisions eternal auditors should review the organization s policies and processes related to staff compensation

To determine how an organization provides oversight of its risk management and control activities internal auditors should review board meeting minutes and the board policy manual

To assess how an organization promotes ethics and values both internally and among its external business partners, internal auditors should review the organization' s related objectives programs and activities

To evaluate how an organization ensures effective performance management and accountability internal auditors should review previously conducted risk assessments