Which of the following scenarios depicts an appropriate role for the internal audit activity to...

The appropriate role for the internal audit activity in relation to an organization's risk management process is to provide assurance on the effectiveness of these processes. This involves evaluating whether risk management practices help the organization manage its risks within defined risk tolerance levels effectively and are aligned with the strategic goals. Internal audit should not be involved in designing controls or setting risk tolerance as this could impair their independence.

Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing