ExamGecko
Question list
Search
Search

List of questions

Search

Question 602 - IIA-CIA-Part1 discussion

Report
Export

A risk assessment showed that the cost of addressing a particular risk in the organization's human resources department is greater than the perceived benefit. Which risk response approach should the organization take in this scenario?

A.

Reduce the risk.

Answers
A.

Reduce the risk.

B.

Transfer the risk.

Answers
B.

Transfer the risk.

C.

Accept the risk.

Answers
C.

Accept the risk.

D.

Share the risk.

Answers
D.

Share the risk.

Suggested answer: C

Explanation:

When a risk assessment shows that the cost of addressing a particular risk is greater than the perceived benefit, the appropriate risk response approach is to accept the risk. Risk acceptance means acknowledging that the risk exists but deciding not to take any action to mitigate it, usually because the cost of mitigation is higher than the potential impact. This approach is a rational decision when the risk is deemed to have a low likelihood or impact, or when other controls are considered sufficient.

The IIA Standards: Standard 2120 -- Risk Management: 'The internal audit activity must evaluate the effectiveness and contribute to the improvement of risk management processes.'

COSO ERM Framework: Discusses risk response options including risk acceptance as a viable strategy when the cost-benefit analysis justifies it.

asked 03/11/2024
Austine Ogheneruemu Onakpoma
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first