When developing the organization's first risk universe, which of the following would the chief audit executive be least likely to consider?
A) The amount of risk that an organization is willing to seek or accept.
B) The extent and degree of interdependency for identified key risks.
C) The boundaries established to manage the amount of risk taken.
D) The exposure to risks following management's risk responses.

Question

Quizplus · Accepted Answer

The chief audit executive would be least likely to consider the exposure to risks following management's risk responses when developing the organization's first risk universe, as this focuses more on the current state of risk management rather than the initial identification and categorization of risks.

When Developing the Organization's First Risk Universe, Which of the Following