nayizhenfeng

The correct answer is B

The “Sound Practices” study, 2003, develops eight key principles for operational (op) risk management plans, and one of the principles recommends that the op risk plan must be scrutinized by internal auditors. The study also recommends an active participation, in terms of approval, review, and implementation, of the board of directors.