Where there is no risk management function, the internal auditor may act as a$/$an $...$ to establish a risk management strategy and framework.

Select one:

a$.$

facilitator

b$.$

independent assurer

c$.$

consultant

d$.$

risk manager