ExamGecko
Question list
Search
Search

Related questions











Question 582 - CISA discussion

Report
Export

Which of the following should be the PRIMARY role of an internal audit function in the management of identified business risks?

A.
Establishing a risk appetite
Answers
A.
Establishing a risk appetite
B.
Establishing a risk management framework
Answers
B.
Establishing a risk management framework
C.
Validating enterprise risk management (ERM)
Answers
C.
Validating enterprise risk management (ERM)
D.
Operating the risk management framework
Answers
D.
Operating the risk management framework
Suggested answer: C

Explanation:

The primary role of an internal audit function in the management of identified business risks is to validate the enterprise risk management (ERM) process and provide assurance on its effectiveness. The internal audit function should evaluate whether the ERM process is aligned with the organization's objectives, strategies, policies and culture, and whether it covers all relevant risks and controls. The internal audit function should also assess whether the ERM process is operating as designed and producing reliable and timely information for decision making. The other options are not the primary role of an internal audit function, but rather the responsibilities of senior management, board of directors or risk owners.Reference:

ISACA, CISA Review Manual, 27th Edition, chapter 1, section 1.41

ISACA, IT Audit and Assurance Standards, Guidelines and Tools and Techniques for IS Audit and Assurance Professionals, section 12072

asked 18/09/2024
Maritza Van Der Merwe
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first