Who is ultimately responsible for identifying new or emerging key risk areas that should be covered by the organization’s governance process?
a. The board of directors.
b. Senior management.
c. Risk owners.
d. The internal audit function.