?

The purpose of the internal audit activity’s evaluation of the effectiveness of existing risk management processes is to determine that