Corporate Governance Risk Management & Internal Controls 3

Question 1

What is a 'heat map' in enterprise risk management?

Accepted Answer

A visual tool that plots risks by likelihood and impact to prioritize risk management efforts

Answer

A dashboard showing real-time temperature of server room equipment

Answer

A geographical map of where the company's operational risks are concentrated

Answer

A color-coded compliance checklist used by internal auditors

Question 2

What is a 'significant deficiency' in internal controls, compared to a material weakness?

Accepted Answer

A control deficiency less severe than a material weakness but still important enough to warrant attention by those responsible for oversight

Answer

A control deficiency that requires immediate restatement of financial results

Answer

A minor procedural error corrected before year-end that requires no further disclosure

Answer

A control gap identified externally by the company's auditors during the annual audit

Question 3

What is 'scenario analysis' in risk management?

Accepted Answer

The process of evaluating how specific hypothetical events or conditions could affect the organization's risk profile and financial outcomes

Answer

A statistical model used to calculate a company's value at risk (VaR)

Answer

An audit technique comparing current-year results to prior-year benchmarks

Answer

A board exercise to review the company's strategic plan under base-case assumptions only

Question 4

What is 'operational risk' in corporate governance?

Accepted Answer

The risk of loss from failed internal processes, people, systems, or external events

Answer

The risk that interest rate changes reduce the value of fixed-income holdings

Answer

The risk that a competitor gains market share through product innovation

Answer

The risk of default on the company's outstanding debt obligations

Question 5

What does 'tone at the top' mean in the context of internal controls?

Accepted Answer

The ethical culture and commitment to integrity set by senior leadership that permeates the entire organization

Answer

The volume of senior management communications about compliance policies

Answer

The percentage of audit findings related to executive-level activities

Answer

The board's formal risk appetite statement published in the annual report

Question 6

What is the purpose of a 'management representation letter' in an audit?

Accepted Answer

A written statement from management confirming representations made to the auditor and acknowledging responsibility for financial statements

Answer

A letter from management asserting that all internal audit recommendations have been implemented

Answer

A declaration by the CFO that all executive compensation has been properly disclosed

Answer

A board resolution authorizing management to sign the annual financial statements