If an organization has no established risk management process, internal auditors should

B. Formulate hypothetical results of possible consequences resulting from risks not being managed.

D. Inform management and suggest corrective actions

Formally discuss with the directors their obligations for risk management processes

Ans: Option D ,Inform management and suggest corrective actions.

Option (d) is right answer.

The answer is letter D....................

D. >>>>>>>>>>>>>> Inform management and suggest corrective actions.

The correct answer is :

D. Inform management and suggest corrective actions.

Option D) IS Answer <<<<<<<<<<<<<<<<<<<

Correct Answer is A. Establish a risk management process based on industry norms.

Absolutely the answer is (d).

B. Formulate hypothetical results of possible consequences resulting from risks not being managed.

This must come first, so that the management has the vision of how risk management is important in any company / industry. This may take you time to research such results but in the end it will surely open up the management's view on how to see things in parallel with their daily operations.