Module 2 unit 5: Risk assurance & reporting

Question 1

What do we mean by the ‘control environment’?

Answer 1

The whole range and interaction of controls that address risks and support the achievement of objectives including resources, systems, processes, culture, structure and tasks.

Question 2

Describe the ‘three lines of defence’ used to provide assurance of good risk management

Answer 2

1. Business managers (responsible for applying the risk man. framework)
2. Risk management function (responsible for supporting and challenging the RM activities and designing the RMF)
3. Internal audit (responsible for providing independent and objective assurance on the robustness of the RMF and the effectiveness of internal control

Question 3

How do the Institute of Internal Auditors define internal auditing?

Answer 3

Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organisation’s operations.

It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

Question 4

How does internal audit fit into the “three lines of defence” model?

Answer 4

Internal audit represents the third line of defence.

Its role is to provide assurance over the effectiveness of the control environment and it also assesses the operation of the risk management strategy and activities in the organisation.

Question 5

What are the four overarching responsibilities of an audit committee?

Answer 5

1. External audit
2. Internal audit
3. Financial reporting
4. Regulatory reports

Question 6

What information on risk are companies required to disclose in their annual report and accounts?

Answer 6

Companies are required to disclose their principal risks and uncertainties in their annual report and accounts.

Question 7

Why do many organisations not regard “reputation” as a risk category?

Answer 7

Most organisations regard damage to reputation as a consequence of the occurrence of risk events, rather than a risk in itself

Question 8

The Nolan principles of public life underpin governance activities within government departments, agencies or authorities. List all 7.

Answer 8

Selflessness
Integrity
Objectivity
Accountability
Openness
Honesty
Leadership