Which of the following statements is correct with regard to risk management?
A. The board’s responsibility for risk management cannot be assigned to a board committee, such as a board risk committee.
B. The chief audit executive is accountable to the board for designing, implementing and monitoring the risk management process.
C. The total process of risk management, which includes a related system of internal control, is the responsibility of the board.
D. The finance director is responsible for the overall implementation of the risk management process.