the internal audit activity must evaluate risk exposures relating to which of the following when examining an organization's risk management process?...

According to the Standards, the internal audit activity must evaluate risk exposures relating to which of the

following when examining an organization's risk management process?

1.Organizational governance.

2.Organizational operations.

3.Organizational information systems.

4.Organizational structure.

A. 1 and 3 only

B. 2 and 4 only

C. 1, 2, and 3 only

D. 1, 2, and 4 only