The internal auditor who works in enterprise risk management (ERM) performs each of the following activities, except:
a. Giving assurance that the risks of the organization are correctly evaluated.
b. Setting the risk appetite of the organization.
c. Evaluating the risk-management process.
d. Coordinating ERM activities.
Answer: B