click below
click below
Normal Size Small Size show me how
Internal Auditing
Chapter 4
| Question | Answer |
|---|---|
| Risk | The possibility that an event will occur and adversely affect the achievemnt of objectives. |
| Opportunity | The possibility that an event will occur and positively affect the achievement of objectives. |
| Business Risk | Risks that are specifically associated with organizations conducting a form of business: uncertainties regarding threats to the achievement of business objectives. |
| Enterprise Risk Mangement | The process conducted by management to understand and deal with uncertainties (that is, risks and opportunities)that could affect the organization's ability to achieve its objectives. |
| Objectives | What an entity desires to achieve. When referring to what an organization wants to achieve, these are called business objectives, and may be classified as strategic,operations, reporting, and compliance. |
| Risk Management Philosophy | Set of shared beliefs and attitudes characterizing how the organization consiers risk in everything it does. |
| Risk Appetite | The amount of risk, on a broad level, an organization is willing to accept in pursuit of its business objectives. |
| Risk Tolerance | The acceptable levels of risk size and variation relative to the achievement of objectives, which must align with the organization's risk appetite. |
| Inherent Risk | The combination of internal and external risk factors in their pure, uncontrolled state, or, the gross risk that exists, assuming there are no internal controls in place. |
| Residual Risk | The portion of inherent risk that remains after management executes its risk responses(sometimes referred to as net risk). |
| Control | Any action taken by management, the board, and other parties to manage risk and increase the likelihood that established objectives and goals will be achieved. |