ExamGecko
Question list
Search
Search

List of questions

Search

Question 686 - IIA-CIA-Part1 discussion

Report
Export

Once an organization's risks are identified, what would be the next step to ensure resources are properly allocated to manage those risks?

A.

Risk responses must be selected.

Answers
A.

Risk responses must be selected.

B.

Risks must be assessed.

Answers
B.

Risks must be assessed.

C.

The risk universe must be established.

Answers
C.

The risk universe must be established.

D.

Risk responses must be aligned.

Answers
D.

Risk responses must be aligned.

Suggested answer: B

Explanation:

After identifying an organization's risks, the next crucial step is to assess those risks. Risk assessment involves evaluating the identified risks to determine their potential impact and likelihood. This assessment helps prioritize the risks, enabling the organization to allocate resources effectively to manage the most significant risks. Without assessing the risks, the organization would lack the necessary information to make informed decisions on how to respond to and mitigate these risks.

The Institute of Internal Auditors (IIA) Standards and Practice Advisories.

COSO Enterprise Risk Management (ERM) Framework.

'Internal Auditing: Assurance & Advisory Services' by IIA, Chapter on Risk Assessment.

asked 03/11/2024
Dewi Fitriyani
52 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first