Which of the following is true regarding the stakeholder theory of corporate social responsibility?

Which of the following definitions best describes enterprise risk management?

An internal auditor is reviewing the accounts receivable when she discovers account balances more than three years old. The auditor was previously supervising the area during this time,and she subsequently advises the chief audit executive (CAE) of a potential conflict.
Which of the following is the most appropriate course of action for the CAE to take?

Which of the following elements is important for an internal auditor to consider when performing a privacy risk assessment of an organization?
I. Areas where personal information is collected, used, stored, and disseminated.
II. Inherent risk.
III. Privacy practices of competitors.
IV. Third-party recipients of information.

In order to be organizationally independent, the chief audit executive should report administratively to the [List A] and functionally to the [List B].
[List A]
[List B]