Which of the following is the most appropriate consideration during this process?

A new internal audit activity is considering the adoption of a risk and control framework.

Which of the following is the most appropriate consideration during this process?
A . The framework should not be developed by the internal audit activity
B. The framework should apply to individual projects rather than the organization as a whole
C. The framework should always be tailored to the organization
D. The framework should require fewer resources to implement

View Answer

Answer: C