Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B as it reflects the internal understanding of risks, including strategic, operational, financial, and compliance risks. Management is closest to the business processes.
Internal audits are pivotal because they provide an independent evaluation of risk management practices across the organization, assessing both the effectiveness of controls and compliance with policies and regulatory requirements.
B. Management's risk self-assessment Management's risk self-assessment involves the organization's own assessment and understanding of its risks, which can provide valuable insights into the organization's risk profile. While external audits, internal audits, and information security vulnerability assessments are important components of risk management, management's self-assessment reflects the organization's own perception of risks, goals, and strategies, and it plays a central role in shaping the overall risk profile and risk management strategy.