A.Senior management and management of the audited area.

B.The audit committee and the external auditors.

C.The audit committee and senior management.

D.Senior management and the external auditors.

A.The exposure to risks following management's risk responses.

B.The boundaries established to manage the amount of risk taken.

C.The amount of risk that an organization is willing to seek or accept.

D.The extent and degree of interdependency for identified key risks.

A.Selling a nonstrategic business unit.

B.Limiting access to an organization's data center.

C.Hedging against exchange rate variations.

D.Outsourcing a high-risk activity.

A.Objective setting.

B.Information and communication.

C.Control activities.

D.Event identification.

A.External audits.

B.Key controls.

C.Internal audits.

D.Whistleblower hotline.