21 RMC

What does RASP stand for in the context of risk management?

• Risk Assessment and Security Protocol

• Risk Architecture, Strategy, and Protocols

• Risk Analysis and Strategic Planning

• Risk Allocation and Safety Procedures

According to British Standard BS 31100, what should be included in the risk management framework?

• Risk assessment procedures and control objectives

• Risk response plans and improvement recommendations

• Objectives, mandate, and commitment to manage risk

• Event reports and monitoring reports

What is the most important component of the Risk Management Policy?

• Risk performance and monitoring reports

• Risk management policy statement

• Risk management roles and responsibilities

• Risk assessment procedures

What is the purpose of the Risk Architecture in an organization?

• To set out lines of communication for reporting on risk management issues

• To establish risk management responsibilities

• To define the risk management strategy

• To produce risk management guidelines

Why is it important for an organization to update the risk management manual annually?

• To align risk management activities with current best practice

• To reduce the burden of record-keeping

• To avoid cooperation between risk management and internal audit

• To eliminate the need for risk registers

What is the purpose of a risk register in an organization?

• To set out lines of communication for reporting on risk management issues

• To establish risk management responsibilities

• To record information on current controls and intended additional controls

• To define the risk management strategy

What is the relationship between Risk Management and Internal Audit?

• Both focus on risk assessment and identification

• Successful implementation requires close cooperation and understanding

• Internal Audit evaluates controls while Risk Management tests efficiency

• Internal Audit identifies risks while Risk Management implements controls

What should be included in the Risk Management Manual?

• Risk assessment procedures and control objectives

• Risk response plans and improvement recommendations

• Details of responsibilities, procedures, and protocols for managing risk

• Event reports and monitoring reports

Why is it necessary to keep records in risk management?

• To reduce the importance of risk registers

• To increase bureaucratic burden

• To demonstrate successful implementation of risk guidelines

• To avoid decision-making based on information

What is the purpose of risk performance and certification reports?

• To establish risk management responsibilities

• To record details of significant threats

• To monitor the number of motor vehicle accidents

• To evaluate the effectiveness of control activities