CRMA Assessing Risk Appetite 5

Question 1

Which of the following BEST describes a 'risk appetite framework'?

Accepted Answer

The integrated structure of statements, metrics, limits, escalation protocols, and governance processes used to define and manage risk appetite.

Answer

A risk appetite framework is a comprehensive, integrated set of components — from statements to metrics to governance — that together operationalize the organization's desired risk posture.

Question 2

When assessing risk appetite for a new business venture, management should FIRST:

Accepted Answer

Determine whether the venture's risk profile falls within the board-approved risk appetite.

Answer

Before allocating resources to any new venture, management should confirm the associated risks fit within the board's sanctioned risk appetite.

Question 3

Which of the following is a limitation of expressing risk appetite solely in qualitative terms?

Accepted Answer

They cannot be easily translated into actionable thresholds, making consistent application difficult.

Answer

Purely qualitative appetite statements are inherently subjective, making it difficult to consistently determine when a risk level exceeds the stated appetite in practice.

Question 4

An internal auditor notices that a business unit consistently operates at the upper boundary of its approved risk tolerance. What is the MOST important concern to raise?

Accepted Answer

Consistently operating near the boundary suggests the unit may breach tolerance during adverse conditions, warranting proactive management attention.

Answer

Operating consistently at the boundary of tolerance leaves no buffer; any adverse event could push actual risk above approved limits, which is a material concern for management.

Question 5

In the context of ERM and CRMA, which statement about risk appetite and organizational culture is MOST accurate?

Accepted Answer

Organizational culture can cause actual risk-taking to diverge from the formally stated appetite, making culture a key audit consideration.

Answer

An organization's culture — including incentives, leadership behaviors, and informal norms — can override formal risk appetite statements, making cultural assessment essential for audit.

(CRMA) Certification in Risk Management Assurance Practice Test

(CRMA) Certification in Risk Management Assurance Practice Test

CRMA Assessing Risk Appetite 5