All Flashcards

1
Q

The decision to make a financial investment is an example of what type of risk?

A

Speculative.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When considering an emerging risk, what typical outcome will always be in evidence?

A

Uncertainty.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Rafiq chooses to accept the risks associated with his favourite pastime of deep-sea diving. This choice is an example of

A

risk voluntariness.

NOT
Risk perception

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When applying probability theory to a specific period of time, a measurement of 1 indicates that the event

A

will occur.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

One of the levels of Renn and Rohrmann’s structured framework on risk perception is

A

emotional factors.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What form of risk is most likely to have a positive influence on an individual’s perception of driving a car?

A

Controlled risks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a key difference between pure and speculative risks?

A

Speculative risks may result in a benefit to the risk-taker, whilst pure risks will only result in a loss
or a break-even position.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When considering the likelihood that a risk event may occur, a risk manager should primarily review the probability of its occurrence alongside

A

frequency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What must a Chief Risk Officer do, if anything, when identifying a significant new and emerging risk to the business?

A

Report details of the new risk to the Board of Directors in a timely manner to agree additional budgets and actions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Within a large organisation, the responsibility for monitoring and advising on the effectiveness of risk management decisions is primarily the responsibility of the

A

internal audit function.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

A key development of the evolution of risk management theory in the fifteenth century was the (share)

A

invention of the printing press to share ideas and information.

NOT
development of mathematical models.

introduction of probability theory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A key benefit of effective risk management to a manufacturing company is likely to be

A

a reduction in insurance costs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A key factor that an audit team will consider when assessing a large global organization’s enterprise (timing)

A

relevant risk information is captured and communicated in a timely manner across the organisation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Where an organisation is unable to assess a risk impact in financial terms, it may typically

A

measure the risk in qualitative terms.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

In a risk management context, internal control activities within an organisation typically relate to

A

policies and procedures that help ensure that risk actions are taken.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

For a risk committee to function effectively within a large organisation, it must

A

have unrestricted access to accurate risk information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Succession planning for senior management within an organisation is an example of

A

risk reduction.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

A key disadvantage of relying on risk registers for effective risk management controls within an organisation is that they

A

may fail to take account of correlations between risks.

NOT

are based on risk models that do not consider all circumstances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Where a simple risk description table is contained within a risk register, ‘scope of risk’ relates to

A

a description of associated possible events that might materialise.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

The ISO 31000 risk management standard contains a process section which covers

A

risk identification, assessment and management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Published international risk management standards should always aim to

A

establish a benchmark of best practice in the main areas of risk management.

NOT

provide detailed guidance on the effective implementation of enterprise risk management
frameworks.

ensure risk management laws and regulations are fully adhered to.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Where an organisation adopts an internal control approach to risk management, it means that it will always

A

concentrate on reducing the uncertainty of outcomes by controlling risks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

1

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

When an organisation is looking to expand into a new business market, the emergency services may be able to provide the organisation with useful information on

A

identified risks and risk trends.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

When an organisation is reviewing its risk management concerns, a key limitation of a physical survey is that it is typically

A

focused narrowly on one specific aspect of the risk.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What method is the insurance risk manager of a large commercial airline most likely to use when categorizing all risks faced by the organisation?

A

The airline’s own classification system.

NOT

The standardised global classification system for all risks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

A risk manager is analysing the cause and effect of a recent risk event which has occurred within the organisation. The risk manager should consider that (connections)

A

there may be multiple unconnected causes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

When operating within a risk management framework, identifying risks that are unacceptable to an
organisation is known as risk …

A

evaluation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

In an organisation, operational risk is typically defined as a risk of loss resulting from

A

inadequate processes and systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Within a large manufacturing company, financial risks are most commonly associated with

A

liquidity and profitability issues.

NOT

loans and consumer credit defaults.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Within a large organisation, why might a risk manager find it difficult to categorise risks?

A

There is no universally accepted definition of individual risks.

NOT

There is never a clear purpose for such risk categorisations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

A car dealer is arranging insurance cover for the majority of the risks it faces to protect itself against identified potential losses. The dealer will typically NOT be able to arrange insurance for

A

losses from reputational damage.

WRONG

credit losses.

Correlated losses

Loses from fraud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

A financial services organisation has reviewed its decision-making processes and has found risk management failings relating to data protection and anti-money laundering policies. As a result of … (what sort of risks are these)

A

Compliance and regulatory risk.

NOT

Legal and operational risk.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A risk manager is reviewing two separate risks within the organisation. She believes that they could
be interrelated, which could result in greater damage than if the risks had remained completely
separate. She is therefore most likely to be considering the concept of

A

aggregation and correlation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

The Compliance Director within a large organisation is considering implementing a governance, risk and compliance framework. The primary objective she would be seeking to achieve is to

A

eliminate inherent conflict between the compliance, risk and audit functions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Enterprise Risk Management within a large financial organisation is regarded as

A

a holistic approach to risk management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

In a large international bank, to whom would the Chief Risk Officer typically report to in respect of an assessment of risks for the bank?

A

The Chief Executive Officer, the Board of Directors and appropriate senior management committees.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

As a result of recent flooding, a delivery company’s vehicles have all been destroyed. The company now faces losses in respect of its vehicles, revenue and reputational damage. These are examples of

A

aggregated losses.

NOT

Correlated losses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

The main way in which governance, risk and compliance improves operational efficiency within a
manufacturing organisation is by

A

aligning strategy, processes, technology and staff.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What method of risk retention involves setting up a separate company which is owned and controlled by the parent organisation?

A

Captive insurance arrangement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

A small plant hire company is seeking to protect itself against responsibility for the legal liability incurred as a result of bodily injury to third parties. In terms of risk transfer, the organisation is most likely to

A

purchase public liability insurance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

A large global organisation has employed an insurance intermediary to assist the organisation in achieving its risk management objectives. The organisation will therefore most likely require the intermediary to advise an insurer on

A

facilitate risk surveys, advise on insurer selection and implement appropriate insurance arrangements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

A global organisation has established a captive insurance arrangement rather than transferring all insured risks externally. A key disadvantage of this course of action is

A

increased risk retention.

NOT

increased short-term cashflow requirements.

reduced margin from insurance programmes.

44
Q

A motor insurer has established processes to assess a commercial insured’s dependency on the insured’s suppliers and how it achieves safe and appropriate fleet risk management. The insurance broker, acting on behalf of the insurer, will typically attain these through the use of

A

business interruption reviews and a check of the driver handbook.

45
Q

A risk manager is considering the likelihood that the risk management systems employed within his
organisation might fail. He should be aware that

A

risk management systems will typically fail because of human behaviour.

46
Q

When considering the likely consequences of the failure of an organisation’s risk management systems, the organisation should be aware that the (secondary)

A

secondary consequences may be far more severe than primary consequences.

NOT

secondary consequences will be reduced if the appropriate governance risk and compliance
framework is introduced immediately after the risk event has occurred.

47
Q

A large company is considering its risk management standards following an extensive risk management review. What is the company most likely to utilise to assess whether its risk management processes will fail?

A

Key control indicators.

NOT

Key risk indicators.

Fault trees.

48
Q

What is the key consideration by a large international bank when assessing global risks using computer-based risk modelling?

A

Assumptions used may not be correct and outcomes may not be correctly interpreted.

49
Q

For what key reason may risk management systems typically fail in a large organisation?

A

The attitudes of key personnel.

50
Q

The Chief Risk Officer within a large manufacturing organisation has been asked by the Board of
Directors to provide an example of a pure risk. A suitable example would be

A

a fire occurring in a new manufacturing process line.

51
Q

Within an organisation, when attempting to manage and control risk, the organisation should be aware that

A

uncertainty must be taken into account.

52
Q

When applying probability theory to a specific period of time, a measurement of 0.85 indicates that the event

A

is very likely to occur.

53
Q

Which type of risks are characterised by a perceived lack of control and catastrophic potential?

A

Dread risks.

54
Q

An organisation following the Renn and Rohrmann structured framework should be aware that an individual’s risk perception is influenced by common sense, which is also referred to as

A

collective reasoning strategies.

55
Q

How can the perception of risk by senior management have a fundamental effect on the future direction of a manufacturing organisation?

A

It will shape the organisation’s risk appetite and attitude towards risk acceptance.

56
Q

As part of an organization’s risk management process, when considering risk and uncertainty, the risk team should be aware that (both)

A

risk can apply to both opportunities and threats to the organisation.

57
Q

How does a pure risk differ from a speculative risk?

A

A pure risk only leads to the possibility of a loss, whereas a speculative risk may lead to a gain.

58
Q

A risk manager in an organisation is calculating a risk factor. The two components in the calculation
are

A

probability and impact.

59
Q

How did the large fluctuations in prices of many raw materials and commodities in the 1970’s influence the evolution of risk management?

A

The use of derivatives as a risk management tool increased.

NOT

Business continuity planning was developed.

60
Q

An influence on the evolution of risk management theory in the 19th Century was based on

A

mathematicians collecting measurements to provide statistical data.

NOT

placing a greater emphasis on the human element of decision making.

61
Q

When considering risk management within a manufacturing organisation, what is a benefit of
conducting a detailed structured analysis of the entire organisation?

A

It would uncover weaknesses and provide valuable information that can be used to improve
processes.

62
Q

Why is it important that an organisation attempts to measure the benefits of risk management in
financial terms?

A

It will quantify the level of internal and external resources that are required.

63
Q

Within a large global organisation, who has the primary responsibility of identifying individual risk owners and making sure appropriate risk control activities are carried out?

A

The Chief Risk Officer.

64
Q

In relation to a large organisation’s risk management process, what does the internal audit function
typically have responsibility for?

A

Providing detailed assurance that risk management processes are effective.

65
Q

Within a large global organisation, the compliance function is part of what?

A

a part of both the risk management and audit functions.

66
Q

An organisation operates with separate and independent risk management, compliance and audit
functions. The organisation’s board of directors should be aware that

A

work will often be duplicated and costs will usually be increased.

67
Q

What is typically the day-to-day responsibility of a Chief Risk Officer within a large organisation?

A

Ensuring that all key risks are adequately managed and reported.

68
Q

A large organisation is using a typical risk management process and has just established and
identified the risks to which it is exposed. What is likely to be the next stage in the process?

A

Analysing risks.

69
Q

One of the reasons that an organisation should monitor and regularly review its risk management process is to

A

consider whether lessons could be learned for future management of risks.

70
Q

A risk register has been produced for a large engineering company. What is a key difficulty of using
such a register?

A

It may fail to take account of correlations between risks.

71
Q

What is a key consideration when designing an organisational risk register? (risk profile)

A

The organisation’s risk profile should be captured.

NOT

All staff must receive training on updating the register.

All staff must be able to update and accept new risks.

72
Q

The ISO 31000 standard separates risk management areas into

A

frameworks, principles and processes.

73
Q

Which risk management standard is mainly concerned with the US legal requirements for reporting
accurate financial data?

A

COSO.

74
Q

One reason for a risk manager to review an organisational chart is to

A

establish a decision-making route.

NOT

establish the potential impact of a possible risk incident.

75
Q

In a manufacturing organisation, what is a fault tree designed to show?

A

It identifies the likelihood of an interruption arising.

76
Q

A logistics manager for a supermarket chain identifies that there is a continual delay in the deliveries
to stores. What is the most appropriate technique to identify the cause of the problem?

A

Flow chart.

77
Q

To comply with the UK Corporate Governance Code, to which body must all UK-listed companies provide information concerning solvency, liquidity, risk management and viability on an annual basis?

A

The Financial Reporting Council.

78
Q

Where an insurance organisation has failed to keep up with new legislation governing its day-to-day
activities, it primarily increases its exposure to

A

compliance and regulatory risk.

79
Q

A large organisation is assessing the financial strength of one of its customers. Which types of risk
are being assessed?

A

Credit and liquidity.

80
Q

Within an organisation, business risk can be categorised as the

A

probability of a loss being inherent in an organisation’s operations and environment.

NOT

alleged or actual breach of contract between an organisation and counterparty.

uncertainty relating to the occurrence of an insured event.

81
Q

Why can it be difficult for an organisation to categorise risks?

A

There is no universally accepted definition of individual risks.

82
Q

Understanding the potential causes of risk events will help an organisation to

A

reduce the frequency of loss.

83
Q

What advantage does a Governance Risk and Compliance framework offer when compared to retaining separate and independent risk control functions?

A

It provides a consolidated risk management function.

84
Q

Where a large organisation uses enterprise risk management to create a framework to consider all
risks affecting the organisation, this is known as

A

a holistic approach.

85
Q

Which type of risk framework is expected to improve efficiency by aligning strategy, processes,
technology and people?

A

Governance, risk and compliance.

NOT

Corporate, governance and control.

86
Q

When implementing an enterprise risk management (ERM) framework, a large organisation should be aware that ERM relies upon what?

A

relies largely upon the analysis and evaluation of risks against criteria that are set by the Board.

NOT

will always require assessment of risk management processes from both internal and external
auditors.

87
Q

A train has crashed and is badly damaged. There have been numerous claims from injured passengers as well as a loss of revenue for the train operator. This is an example of

A

risk aggregation.

88
Q

A requirement for successfully implementing a governance risk and compliance framework within
an organisation is for

A

consistent terminology to be introduced across the organisation’s risk management and
assurance functions.

89
Q

An organisation will typically find that its insurance arrangements will exclude cover for (database)

A

the value of its computerised database.

NOT

consequential losses following natural disasters.

credit risks

90
Q

Insurance policies issued by a commercial insurer operating solely in the UK are directly governed
under which Act?

A

Insurance Act 2015.

91
Q

A broker is undertaking a business interruption review on behalf of a client. This would most commonly include an evaluation of the

A

effectiveness of a business continuity plan.

92
Q

What is a primary benefit of a large commercial organisation self-insuring a risk?

A

Its short-term cash-flow position is likely to improve.

93
Q

A large manufacturing organisation has renewed an insurance policy and has accepted a significant
increase in the policy deductible. What is this most likely to indicate?

A

Increased risk retention.

94
Q

A large organisation has entered into a surety arrangement using a counterparty to guarantee certain credit agreements. The main risk to the organisation of the counterparty failing is that the organisation would

A

be liable for all future losses incurred on these credit agreements.

NOT

be responsible for all of the counterparty’s losses.

95
Q

For what primary reason could enterprise risk management (ERM) systems fail?

A

Financial constraints could compromise the implementation of ERM systems.

96
Q

What could a financial organisation make primary use of, to assess whether its risk management
systems are likely to fail? (indicators)

A

Key control indicators.

NOT

Key risk indicators

97
Q

An engineering company is assessing the key risks faced within the manufacturing process. Although cover is in place for most of the potential losses that may arise, the company should be aware that

A

human error cannot be eliminated.

98
Q

As a direct result of recent disasters in the oil drilling and exploration sector, for companies in this sector there has been an increase in

A

new regulations and safety controls.

99
Q

An organisation is considering budgets for its risk management activities. Ideally the organisation
will understand that the benefits of such activities should

A

be measurable in financial terms.

100
Q

Which individual within a global organisation carries out selected duties in relation to risk management and reports to the risk sub‐committee?

A

Risk officer.

101
Q

The form of risk management typically provided by an organisation’s audit department is known as

A

an internal control.

102
Q

The most important task of the risk sub‐committee within a large organisation is to

A

publish and maintain the overall risk management philosophy.

NOT

ensure that all key risks are adequately reported and managed.

103
Q

Risk Officer vs Risk manager vs Chief Risk Officer

A

Use the term ‘chief risk officer’ to denote the most senior professional risk manager in an organisation.

Risk Manager - no definition. A risk manager could have board status in some organisations, or a middle management or lesser role in others. In some organisations the role may focus on a particular specialist area
of risk, such as operational, financial or IT risk

Risk officer is the title given to a risk management professional who carries out selected duties under the guidance and direction of the chief risk officer.

104
Q

Silo based organization meaning

A

An organization where business goals, scope of responsibility and control systems are distributed according to the departmental divisions. In such organizations, cross-functional processes are typically not well understood, managed or controlled.

105
Q

Holistic meaning

A

characterized by the belief that the parts of something are intimately interconnected and explicable only by reference to the whole.

106
Q

Renn and Rohrmann risk perception levels

A

First level - covers collective and individual reasoning strategies that have evolved over the years, popularly referred to as common sense

Second level - covers knowledge of the risk, or at least what we believe from available information to be true

Third level - concerns the influence of social and political institutions that people associate with a risk or its cause

Forth level - explores cultural factors that affect risk perception and govern many of the lower levels of influence