Exam IIA-CIA-Part1 topic 6 question 255 discussion

According to IIA guidance, which of the following activities is appropriate for an internal auditor to perform with regard to the organization’s corporate social responsibility (CSR) program?

1. Determine whether the organization has adequate controls to achieve its CSR objectives.
2. Facilitate a management self-assessment of CSR controls and results.
3. Consult on the: project design and implementation for the CSR program.
4. Exclude CSR-related external risks that are beyond the control of the organization.