I'm getting a headache just reading these options. Maybe the exam writers should consider a risk management workshop instead of multiple-choice questions.
Option D is a bit of a stretch. Determining the risk appetite is a strategic decision that should involve the board and senior management, not just the internal audit function.
Option D is a bit of a stretch. Determining the risk appetite is a strategic decision that should involve the board and senior management, not just the internal audit function.
Option C is definitely not correct. Risk management should be a collaborative effort across the organization, not the sole responsibility of the internal audit team.
I think Option B is a bit too far-reaching for the internal audit activity. They should provide input, but not create and implement the processes themselves.
Option A seems reasonable, as the internal audit activity can provide guidance and advice on the risk management framework, but shouldn't be solely responsible for it.
Nu
3 months agoHerman
1 months agoChrista
2 months agoOretha
2 months agoAlease
3 months agoNan
1 months agoSean
2 months agoJohnna
2 months agoHortencia
3 months agoKate
2 months agoDomitila
3 months agoMarta
3 months agoEdda
3 months agoRolland
3 months agoLashanda
3 months agoAngella
3 months agoWendell
2 months agoCyril
2 months agoMaxima
2 months agoJustine
3 months agoLeslee
3 months agoPortia
4 months ago