?

Which of the following best describes the internal audit activity’s purpose in evaluating the adequacy of risk management, control, and governance processes?