The internal audit function should not:
a. Assess the organization’s governance and risk management processes.

b. Provide advice about how to improve the organization’s governance and risk management processes.

c. Oversee the organization’s governance and risk management processes.

d. Coordinate its governance and risk management-related activities with those of the independent outside auditor.