12. Which of the following is the most accurate term for a process to identify, assess, manage, and control potential events or situations to provide reasonable assurance regarding the achievement of the organization's objectives?
A. The internal audit activity.
B. Control process.
C. Risk management.
D. Consulting service.
Answer (C) is correct.
REQUIRED: The process to identify, assess, manage, and control potential events or situations.
DISCUSSION: Risk management is "a process to identify assess, manage, and control potential events or situations to provide reasonable assurance regarding the achievement of the organization's objectives" (The IIA Glossary).
Answer (A) is incorrect. The internal audit activity assists in risk management; it is not the same thing as risk management.
Answer (B) is incorrect. Control processes are "the policies procedures, and activities that are part of a control framework designed to ensure that risks are contained within the risk tolerances established by the risk management process" (The IIA Glossary).
Answer (D) is incorrect. Consulting services are “advisory and related client service activities, the nature and scope of which are agreed with the client” (The IIA Glossary).