Multiple Choice
The second step of the risk assessment process is generally to
A) identify controls to reduce all risk to zero.
B) estimate the exposure from negative events.
C) identify the threats that the company currently faces.
D) estimate the risk probability of negative events occurring.
Correct Answer:

Verified
Correct Answer:
Verified
Q85: Which of the following duties could be
Q86: Why are most fraud not being reported
Q87: Describe the differences between general and specific
Q88: The purpose of the COSO Enterprise Risk
Q89: Which of the following is not a
Q91: The Director of Information Technology for the
Q92: As a result of an internal risk
Q93: Explain how a company could be the
Q94: The COBIT5 framework primarily relates to<br>A)best practices
Q95: According to the ERM model,_ help to