“…While, Walker, Shenkir, and Barton (2002) argued that no precise method or "silver bullet" exist for the role of internal auditor in the ERM framework. While using the internal audit as a monitoring mechanism to reduce agency costs is consistent with the agency theory (Adams, 1994;Jensen & Meckling, 1976), management's responsibility includes monitoring or managing organizational risks, and implementing controls to mitigate such risks; not the internal auditor. From an agency perspective, internal auditors can be considered part of the corporate governance structure because they monitor the financial reporting process (e.g., Beasley & Salterio, 2001;Cohen, Krishnamoorthy, & Wright, 2002).…”