ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 500 - CGEIT discussion

Report
Export

Within a governance structure for risk management, which of the following activities should be performed by the second line of defense?

A.

Conducting internal and external audits

Answers
A.

Conducting internal and external audits

B.

Implementing controls to manage risk

Answers
B.

Implementing controls to manage risk

C.

Monitoring risk and controls

Answers
C.

Monitoring risk and controls

D.

Identifying and assessing risk

Answers
D.

Identifying and assessing risk

Suggested answer: C

Explanation:

Within a governance structure for risk management, the second line of defense is primarily responsible for monitoring risk and controls. This function involves overseeing the effectiveness of the first line of defense (operational management and control implementation) and ensuring that risk management practices are properly integrated into business processes. It serves as a check on the adequacy and effectiveness of risk management across the organization. While conducting audits is a function of the third line of defense (internal audit), and identifying and assessing risk is often a shared responsibility, the distinct role of the second line is to provide ongoing monitoring and oversight of risk management and control processes.

asked 18/11/2024
Frantisek Kohanyi Kohanyi
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first