Which of the following is a correct statement about COSO ERM 2017 framework?
a. It is a framework developed by the IT audit profession.
b. It stresses the importance of having one department responsible for risk management.
c. It focuses on evaluating effectiveness of internal controls.
d. It enhances alignment among strategy setting, decision making, and performance through enterprise risk management.