What is an appropriate first step in an internal auditor’s fraud risk assessment to evaluate how the organization manages such risk?

What is an appropriate first step in an internal auditor’s fraud risk assessment to evaluate how the organization manages such risk?
A . Develop preventive and detective controls
B. Identify potential fraud scenarios
C. Assess the impact and likelihood of fraud risks
D. Determine fraud risk responses

View Answer

Answer: B