Which of the following statements is correct? Select the best answer.

a. Enterprise Risk Management is designed for public companies.

b. Enterprise Risk Management guarantees the achievement of organizational objectives.

c. Enterprise Risk Management involves the identification of events with negative and positive impacts on organizational objectives.

d. Enterprise Risk Management ensures the selection of the risk-reducing risk response for the organization.

e. Enterprise Risk Management requires the establishment of risk and control activities by internal auditors.