CRMA Assessing Risk Appetite 2

Question 1

Which of the following best describes the relationship between risk appetite and risk tolerance?

Accepted Answer

Risk appetite is the broad statement of acceptable risk, while risk tolerance defines the allowable deviation around that appetite.

Answer

Risk appetite is the overall level of risk an organization is willing to accept, while risk tolerance specifies the acceptable variation around that appetite for specific objectives.

Question 2

A company's risk appetite statement says it will 'accept moderate financial risk to pursue growth.' Which scenario would MOST likely exceed this appetite?

Accepted Answer

Entering an unproven emerging market with potential 80% downside and no exit strategy.

Answer

An 80% downside with no exit strategy clearly exceeds a 'moderate' financial risk appetite, indicating misalignment between the activity and stated appetite.

Question 3

When a CAE is assessing whether the organization's risk appetite is effectively communicated, which evidence would be MOST persuasive?

Accepted Answer

Business unit managers can articulate how their decisions align with the appetite statement.

Answer

Effective communication is demonstrated when operational managers actively apply and can explain the appetite in their decision-making, not merely that a document exists.

Question 4

An organization has set a zero risk appetite for regulatory compliance violations. Internal audit discovers a minor, unintentional breach. What is the MOST appropriate internal audit response?

Accepted Answer

Report it consistent with the zero-tolerance stance, regardless of materiality or intent.

Answer

A zero risk appetite means any deviation must be reported, as the organization has determined no level of violation is acceptable regardless of circumstance.

Question 5

Which metric is MOST useful when quantitatively assessing whether an organization's actual risk-taking aligns with its stated risk appetite?

Accepted Answer

Key Risk Indicators (KRIs) tracked against defined thresholds.

Answer

KRIs with defined thresholds provide measurable, ongoing signals that indicate whether actual risk levels are within the appetite boundaries.

(CRMA) Certification in Risk Management Assurance Practice Test

(CRMA) Certification in Risk Management Assurance Practice Test

CRMA Assessing Risk Appetite 2