You need to participate in enterprise risk management and complete an HR-audit. Which of the following is the best definition of an HR-audit in regard to risk management?