IIA-IAP practice question 3 of 35
Management has decided that transactions less than $50 no longer require authorization. Which of the following risk management strategies does this represent?
Full set: 100 questionsComprehensive and Detailed Step-by-Step Explanation: Risk Acceptance: By deciding that transactions below $50 do not require authorization, management is consciously accepting the low-level risk associated with this decision to streamline processes and reduce administrative burdens.
Reference: IIA Practice Guide on Risk Management explains that risk acceptance involves tolerating risks that fall within the organization’s risk appetite. Other Options:
Option A: Risk avoidance would involve eliminating the activity altogether, which is not the case here.
Option C: Risk reduction would involve implementing controls to mitigate the risk, not eliminating authorization requirements. Thus, the correct answer is B. Accept.
Keep practicing
Take the free IIA-IAP practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other IIA-IAP practice questions
- Question 1What is the purpose of establishing engagement objectives during the planning phase of an…
- Question 2An internal auditor was assigned to a payroll process audit engagement. At which stage of…
- Question 4An internal auditor is performing an internal control assessment at a manufacturing compa…
- Question 5Which of the following activities would compromise the independence of the internal audit…
- Question 6Based on the three elements of the Fraud Triangle, which of the following might be consid…
- Question 7A senior internal auditor is planning a compliance audit of the organization's global pur…
