According to IIA guidance, which of the following activities would typically be examined when using the maturity model approach for assessing an organization’s...