Which of the following is correct with respect to roles within an enterprise-wide risk management process? 1. The board provides oversight to the risk management process. 2. Executive management owns the risk management framework. 3. Senior management is assigned ownership of risks. 4. Internal audit modifies the risk assessment determined by management.

Question

Quizplus · Accepted Answer

The board provides oversight, executive management owns the framework, and senior management is assigned ownership of risks. Internal audit does not modify risk assessments but provides independent assurance.

Which of the Following Is Correct with Respect to Roles