In Risk Control Matrix, which of the following is one of the elements the auditor consider and prepare after deciding risk responds from management?

Select one:

a. Assessing the likelihood and impact of risks

b. Risk statement describing each risk

c. Testing approach

d. Activity or subprocess within key process