An internal auditor at a multinational organization is reviewing the effectiveness of the organization's risk management framework. In this scenario, which of t...