ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 114 - IIA-CIA-Part2 discussion

Report
Export

Which of The following best describes a risk that is deemed 'unacceptable' to the organization?

A.
A risk where likelihood and impact are high
Answers
A.
A risk where likelihood and impact are high
B.
A risk where inherent risk exceeds its residual risk
Answers
B.
A risk where inherent risk exceeds its residual risk
C.
A risk where inherent risk exceeds the tolerance level
Answers
C.
A risk where inherent risk exceeds the tolerance level
D.
A risk where residual risk exceeds the tolerance level
Answers
D.
A risk where residual risk exceeds the tolerance level
Suggested answer: D

Explanation:

A risk that is deemed 'unacceptable' to the organization is one where the residual risk (the remaining risk after controls are applied) exceeds the organization's risk tolerance level. This means that despite controls in place, the level of risk remains higher than what the organization is willing to accept. Identifying such risks is critical for ensuring appropriate management action to mitigate them further.

Reference:

The IIA's Practice Guide on Risk Management.

COSO's Enterprise Risk Management -- Integrating with Strategy and Performance.

asked 18/09/2024
john wick
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first