1. Right Answer: A
Explanation: The organizational levels of the COSO ERM framework describe the subsidiary, business unit, division, and entity-levels of aspects of risk solutions.Incorrect Answers:B: Risk components includes Internal Environment, Objectives settings, Event identification, Risk assessment, Risk response, Control activities, Information and communication, and monitoring.C: Strategic objectives includes strategic, operational, reporting, and compliance risks; and not entity-based risks.D: This is not a valid answer.
2. Right Answer: D
Explanation: Communication channels are paths of communication with stakeholders in a project. The number of communication channels shows the complexity of a project's communication and can be derived through the formula shown below:Total Number of Communication Channels = n (n-1)/2where n is the number of stakeholders.Hence, a project having five stakeholders will have ten communication channels. Putting the value of the number of stakeholders in the formula will provide the number of communication channels.Hence,Number of communication channel = (n (n-1)) / 2= (25 (25-1)) / 2= (25 x 24) / 2= 600 / 2= 300Incorrect Answers:A, B, C: These are not valid number of communication channels for the given scenario.
3. Right Answer: A,C,D
Explanation: A common mistake when implementing KRIs other than selecting too many KRIs includes choosing KRIs that are: Not linked to specific risk Incomplete or inaccurate due to unclear specifications Too generic Difficult to aggregate, compare and interpret Difficult to measureIncorrect Answers:B: For ensuring high reliability of the KRI, The indicator must possess a high correlation with the risk and be a good predictor or outcome measure. Hence KRIs are chosen that has high correlation with the risk.
4. Right Answer: C
Explanation: The administrative audit is used to assess the efficiency of the productivity in the operations environment.Incorrect Answers:A: It evaluates the internal control structure of process of functional area.B: Audits that assesses the correctness of financial statements is called financial audit.D: They are the IS audits with specific intent to examine areas, such as processes, services, or technologies, usually by third party auditors.
5. Right Answer: D
Explanation: Risk management is an ongoing project activity. It should be an agenda item at every project status meeting.Incorrect Answers:A: Risk management happens throughout the project as does project planning.B: Milestones are good times to do reviews, but risk management should happen frequently.C: This answer would only be correct if the project has a status meeting just once per month in the project.
Leave a comment