Which of the following is the most appropriate consideration during this process?

A new internal audit activity is considering the adoption of a risk and control framework.

Which of the following is the most appropriate consideration during this process?
A . The framework should not be developed by the internal audit activity
B . The framework should apply to individual projects rather than the organization as a whole
C . The framework should always be tailored to the organization
D . The framework should require fewer resources to implement

View Answer

Answer: C