Which of the following statements is true regarding the role of the internal audit activity...

The internal audit activity should not be responsible for developing the organization's risk management framework, even with appropriate safeguards.

The internal audit activity is typically responsible for alerting operational management to emerging risks and changes in regulatory scenarios

The internal audit activity may coach management on risk response scenarios if safeguards have been implemented.

The internal audit activity should avoid giving assurance regarding the accuracy of risk evaluations if safeguards have not been implemented.