The internal audit function should not:

a$.$ Assess the organization$$s governance and risk management processes.

b$.$ Provide advice about how to improve the organization$$s governance and risk management processes.

c$.$ Oversee the organization$$s governance and risk management processes.

d$.$ Coordinate its governance and risk management$-$related activities with those of the independent outside auditor.