An internal auditor is assessing a company's enterprise risk management (ERM) program. According to COSO ERM, which component focuses on an organization's risk appetite and strategy?
-
A
Control Activities
-
B
Strategy and Objective-Setting
-
C
Information, Communication, and Reporting
-
D
Review and Revision