Which of the following is PRIMARILY responsible for providing assurance to the board of directors and senior management during the evaluation of a risk manageme...