Which of the following is true regarding the purpose of the COSO enterprise risk management framework?
1. It is a process that is ongoing and flows throughout the organization.
2. It contributes to the formulation of the organization's mission and vision.
3. It enables internal audit to provide reasonable assurance to an organization's management and the board.
4. It enables the management of risks within an organization's risk appetite.

COBIT is primarily designed to:

To enhance the independence of both the internal and external audit functions, audit committees should be composed of:

Which of the following activities is most likely to require a fraud specialist to supplement the knowledge and skills of the internal audit activity?