Internal auditors assist management with risk assessment, governance, and control. Which of the following are true regarding internal auditors and the adequacy of an organization's risk management process? 1. Internal auditors must have an understanding of the risk assessment process and the tools used to make the assessment. II. Internal auditors should determine the level of risks acceptable to the organization. III. Internal auditors need to be satisfied that the key objectives of risk management processes are being met IV. Internal auditors should evaluate management's risk processes the same way they analyse risk when planning an engagement. a. 1,IIAND III b. 1,11,111 ANDIV c. I ANDIII d. 1 ANDII