which of the following comments is (are) true regarding the assessment of risk associated with two projects that are competing for limited internal audit resources? industry knowledge should be used to identify the project with the higher priority. activities with higher financial budgets always should be considered higher risk than those with lower financial budgets. activities that are requested by the board always should be considered higher risk than those requested by management. senior management’s evaluations of the risk associated with each project must be considered.
