What is the best description of internal audit?

A. the risk of an inappropriate audit opinion when statements are materially misstated B. an audit performed by an independent external auditor C. the risk that internal controls fail to prevent or detect a misstatement D. independent assurance and consulting activity within an organisation