CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1813

Risk Response and Reporting

The primary reason a risk practitioner would be interested in an internal audit report is to:

  • A maintain a risk register based on noncompliances
  • B plan awareness programs for business managers
  • C assist in the development of a risk profile
  • D evaluate maturity of the risk management process
Explanation

Internal-audit findings provide independent evidence about control weaknesses, noncompliance, and risk exposures. This information is a key input for developing and updating an organization’s risk profile.

Community Discussion

No comments yet. Be the first to start the discussion!