Which of the following is most likely to help the chief audit executive determine whether the level of the risk accepted by operational management exceeds the o...