Question 17 (2 points) When performing an internal audit of new product development, which of the following audit approaches might be used? Verify whether the product development process includes a risk assessment to identify compliance, security, financial or operational concerns. Determine whether relevant policies and procedures exist to govern the process. Examine business case documentation to determine whether focus-group feedback cleared internal thresholds. All of the above. Question 18 (2 points) Saved For a Key Risk Indicator to be most useful, it should