Q5
Single choice
Which of the following would an internal auditor most likely use to document a complex process that includes risks and controls, timelines, and ownership of key steps?