My premise for considering this a potential dilemma is that risk management is a support function and audit is an assurance function and audit should be assuring management and the Board from time to time that risk management is doing a great job of supporting the business.