The internal audit activity plans to assess the effectiveness of management's self-assessment activities regarding the risk management process.Which of the following procedures would be most appropriate to accomplish this objective?

a. Review corporate policies and board minutes for examples of risk discussions

b. Conduct interviews with line and senior management on current practices

c. Research and review relevant industry information concerning key risks

d. Observe and test control and monitoring procedures and related reporting