Which of the following would provide the most reliable information on the risk associated with an auditable activity?
A. Event scenarios with regression analysis.
B. Past audit findings and instances of management failures.
C. Consequences and economic predictability of loss.
D. Management assessment and corroboration by the internal audit activity.