Which of these roles is allowed to conduct assurance?

Which of these roles is allowed to conduct assurance?
A . Operators
B . Management
C . Risk Management
D . Internal Controls
E . Senior Management
F . Board
G . Information Security
H . Internal Audit
I . Compliance
J . Any and all of these roles can conduct assurance activities given the proper purpose and parameters.

View Answer

Answer: J

Explanation:

Any and all of the listed roles can conduct assurance activities provided they have the appropriate purpose and parameters defined. Assurance activities are not limited to a specific function but can be performed by various roles within an organization, such as Internal Audit, Compliance, Risk Management, and Information Security, among others. The key is that these roles must operate with the proper scope, authority, and independence to provide credible and reliable assurance.

Reference: COSO Internal Control C Integrated Framework

ISO 31000:2018 – Risk management C Guidelines