Risk Management Flashcard


Risk management is the identification, assessment, and prioritization of risks (defined in ISO 31000 as the effect of uncertainty on objectives) followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events[1] or to maximize the realization of opportunities. Risk management’s objective is to assure uncertainty does not deflect the endeavor from the business goals.
Principles of risk management

The International Organization for Standardization (ISO) identifies the following principles of risk management:

Risk assessment is the determination of quantitative or qualitative estimate of risk related to a concrete situation and a recognized threat (also called hazard).

For audits performed by an outside audit firm, risk assessment is a crucial stage before accepting an audit engagement. According to ISA315 Understanding the Entity and its Environment and Assessing the Risks of Material Misstatement, "the auditor should perform risk assessment procedures to obtain an understanding of the entity and its environment, including its internal control.

Disclaimer:
This applications just is an excellent tool for self study and exam preparation. It's not affiliated with or endorsed by any testing organisation, certificate, test name or trademark.