ExamGecko
Question list
Search
Search

List of questions

Search

Question 583 - IIA-CIA-Part1 discussion

Report
Export

Which combination of strategies would provide the best evaluation of the effectiveness of the organization's risk assessment activity?

1. Interview staff at various levels to discuss the organization's objectives, significant risks, and risk appetite.

2. Review board meeting minutes to determine whether the significant risks identified are communicated timely to the board.

3. Evaluate the adequacy and timeliness of management remediation actions by reviewing the control design, testing the controls, and reviewing monitoring procedures.

4. Review the professional development plans of internal audit staff to ensure all are competent to assess the organization's risk assessment activity.

A.

1 and 2 only.

Answers
A.

1 and 2 only.

B.

1.2, and 3 only.

Answers
B.

1.2, and 3 only.

C.

1.3. and 4 only.

Answers
C.

1.3. and 4 only.

D.

3 and 4 only.

Answers
D.

3 and 4 only.

Suggested answer: B

Explanation:

Evaluating the effectiveness of an organization's risk assessment activity involves multiple strategies to ensure a comprehensive review. Interviewing staff at various levels (Strategy 1) helps understand the organization's objectives, significant risks, and risk appetite. Reviewing board meeting minutes (Strategy 2) determines whether significant risks are communicated timely to the board. Evaluating the adequacy and timeliness of management remediation actions (Strategy 3) ensures that risks are being effectively managed. Together, these strategies (Option B) provide a robust framework for assessing the effectiveness of the organization's risk assessment activities.

Reference:

IIA Practice Guide: Assessing the Adequacy of Risk Management Using ISO 31000

IIA Standards, Standard 2120: Risk Management

asked 03/11/2024
luis lozano
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first