ExamGecko
Question list
Search
Search

List of questions

Search

Question 633 - IIA-CIA-Part1 discussion

Report
Export

An internal auditor is trying to evaluate what could go wrong after determining that a risk management technique is operating effectively. What type of risk is the auditor assessing?

A.

Inherent risk.

Answers
A.

Inherent risk.

B.

Residual risk.

Answers
B.

Residual risk.

C.

Impact risk.

Answers
C.

Impact risk.

D.

Detection risk.

Answers
D.

Detection risk.

Suggested answer: B

Explanation:

Residual risk is the remaining risk after management has implemented risk responses. The auditor is assessing what could still go wrong despite the effectiveness of the risk management technique in place, which is evaluating the remaining exposure to risk.

Reference:

IIA Standard 2120: Risk Management.

COSO Enterprise Risk Management Framework.

asked 03/11/2024
Michal Mordarski
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first