Which of the following is not an appropriate role for internal auditors after a disaster occurs?

A. Monitor the effectiveness of the recovery and control of operations.

B. Correct deficiencies of the entity’s business continuity plan.

C. Recommend future improvements to the entity’s business continuity plan.
D. Assist in the identification of lessons learned from the disaster and the recovery operations.