Multiple Choice
Risk assessment is best described by:
A) Internal and external events affecting achievement of an entity's objectives must be identified, distinguishing between risks and opportunities.
B) Management selects whether to avoid, accept, reduce, or share risk - developing a set of actions to align risks with the entity's risk tolerances and risk appetite.
C) The entirety of enterprise risk management is monitored and modifications made as necessary.
D) The likelihood and impact of risks are analyzed, as a basis for determining how they should be managed.
Correct Answer:

Verified
Correct Answer:
Verified
Q57: The section of Sarbanes Oxley that requires
Q60: A control plan requires that a manager
Q66: The section of Sarbanes Oxley that prohibits
Q67: _ are the policies and procedures that
Q73: _ are applied to all IT service
Q88: _ sets the tone of the organization,
Q89: A(n) _ is a computer abuse technique
Q97: The major reasons for exercising control of
Q137: Management's legal responsibility to prevent fraud and
Q156: The section of Sarbanes Oxley that requires