Who is expected to take a more focused oversight role with respect to risk management control and governance process?

Internal audit's primary function is to provide independent, objective assurance on the effectiveness of an organization's risk management, control, and governance processes. This mandate requires a systematic, disciplined, and continuous evaluation of these processes. This "hands-on" assurance activity constitutes a more focused oversight role compared to the high-level governance of an audit committee or the specific, periodic scope of an external auditor. Internal auditors are uniquely positioned within the organization to perform detailed reviews and report findings to management and the board.

B. External auditors: Their primary focus is on providing an opinion on the fairness of financial statements and related controls, which is a narrower and more periodic role than comprehensive risk management oversight.

C. Audit committee: This committee, part of the board of directors, performs a high-level governance and oversight function. It relies on the detailed work of internal auditors rather than performing the focused review itself.

D. None of the above: This is incorrect as the role described aligns directly with the defined function of internal auditors.

1. The Institute of Internal Auditors (IIA). International Professional Practices Framework (IPPF) - Mission of Internal Audit and Definition of Internal Auditing. (2017). The official definition states internal auditing is "an independent, objective assurance and consulting activity... It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes." This directly supports the "focused oversight role" described in the question.

2. ISO 31000:2018 - Risk management — Guidelines. Section 5.4.3, Accountability. This section emphasizes that those accountable for managing risk should "ensure that there are appropriate controls" and "periodically review the suitability, adequacy and effectiveness of these controls." The internal audit function is the primary mechanism for providing independent assurance on this review process.

3. Pickett, K. H. S. (2010). The Internal Auditing Handbook (3rd ed.). John Wiley & Sons. Chapter 3, "Corporate Governance and Internal Auditing," pp. 45-47. This academic and professional text clarifies the distinct roles, stating that while the audit committee has ultimate oversight, the internal audit function is responsible for the "detailed work of reviewing the risk and control environment" on behalf of the committee and management.