Once the entity level control measures are applied and additional measures are taken to mitigate the risk, the remaining risk is called: Intemal Risk External Risk Inherent Risk Residual Risk QUESTION 18 The Governance Committee is made by; Senior Management Junior internal Auditor Board of the Company Emplayees involved in second line of defense QUESTION 19 The Second Line of Dofense invioves: Intemal Audit Internal Control Measures Other Assurance Activities None of the above QUESTION 20 set out the behavior norms that the internal auditor should follow to put the principles into pracice. Rules of Conduct Chief Audit Committee Implempntation Standards None of the above