Chapter 13
29. Which of the following is the most important reason for an organization to use enterprise risk management?
a. To help an organization achieve its strategy through identifying, measuring, and managing the organization’s most
important risks and opportunities
b. To ensure complete elimination of all risks that the organization may face
c. To eliminate the possibility of the organization’s present value of future cash flows being affected by exchange
rate fluctuations
d. To help an organization recover the costs incurred to determine whether products and services conform to quality
requirements
30. An organization’s overall desired level of risk taking is referred to as its:
a. residual risk.
b. risk assessment ability.
c. risk response.
d. risk appetite.
31. Which of the following statements is true of the risk appetite determination step within the enterprise risk management
(ERM) process of an organization?
a. Determining an organization’s risk appetite involves identifying the top risks and assessing risks at the inherent
level.
b. Determining an organization’s risk appetite involves determining the organization’s desired overall level of risk
taking.
c. Determining an organization’s risk appetite is the final step in the iterative enterprise risk management process.
d. Determining an organization’s risk appetite requires input from a cross-functional team to capture all the threats—
or risks—to the organization.