CRO Enterprise Risk Management & Governance 2

Question 1

Under the COSO ERM framework, which component ensures that risk responses are embedded into day-to-day operational processes?

Accepted Answer

Control Activities

Answer

Control Activities are the policies and procedures that help ensure risk responses are effectively carried out throughout the organization.

Question 2

A company's board of directors delegates risk oversight to a dedicated committee. Which governance principle does this best illustrate?

Accepted Answer

Board-level risk committee oversight

Answer

Establishing a dedicated board-level risk committee provides focused oversight of the enterprise risk management program, a recognized governance best practice.

Question 3

In ERM, 'risk appetite' differs from 'risk tolerance' primarily because:

Accepted Answer

Risk appetite is the broad desired level of risk while tolerance defines acceptable variation from that level

Answer

Risk appetite is the overall desired risk-taking posture, while risk tolerance defines the acceptable variance or boundaries around that appetite.

Question 4

Which ERM approach is best suited when a firm faces a risk where both frequency and severity are highly uncertain?

Accepted Answer

Scenario analysis

Answer

Scenario analysis is most effective for risks with highly uncertain frequency and severity because it explores plausible future states rather than relying on historical data.

Question 5

A CRO is asked to present the risk profile to the board. Which format most effectively communicates aggregate enterprise risk?

Accepted Answer

An enterprise risk heat map with trend indicators

Answer

An enterprise risk heat map with trend indicators provides the board a consolidated view of risk likelihood, impact, and directional movement across the organization.

(CRO) Chief Risk Officer Certification Practice Test

(CRO) Chief Risk Officer Certification Practice Test

CRO Enterprise Risk Management & Governance 2