According to IIA guidance, which of the following roles for the internal audit function regarding risk management are acceptable with appropriate safeguards in...