An internal auditor is assessing the effectiveness of the organization's risk management practices. She checks to see whether risk management is an integral par...