According to the Standards, the internal audit activity must evaluate risk exposures relating to which of the following when examining an organization's risk ma...