QUESTION 17 Once the entity level control measures are applied and additional measures are taken to mitigate the risk, the remaining risk is called; O Internal Risk External Risk Inherent Risk Residual Risk QUESTION 18 The Governance Committee is made by: Senior Management Junior Internal Auditor Board of the Company Employees involved in second line of defense QUESTION 19 The Second Line of Defense invloves: Internal Audit Internal Control Measures Other Assurance Activities None of the above QUESTION 20 - set out the behavior norms that the internal auditor should follow to put the principles into practice. Rules of Conduct Chief Audit Committee Implementation Standards None of the above