Enterprise risk management:

A. Guarantees achievement of organizational objectives.
B. Requires establishment of risk and control activities by internal auditors.
C. Involves the identification of events with negative impacts on organizational objectives.
D. Includes selection of the best risk response for the organization.