A. Programme

B. Strategic

C. Operational

D. Project

A. Basel Accord (Basel II)

B. Public Company Accounting and Reform and Investor Protection Act

C. International standard for risk management ISO31000:2009

D. Statements of internal control

A. Enterprise

B. Programme

C. Strategic

D. Operational

A. Why standard forms should be used

B. Where to find a blank risk register

C. Which templates are to be used on a project

D. How to use an issue register

A. Lack of risk facilitation resources and time

B. Lack of an assigned risk owner

C. Lack of a high-risk appetite at senior management level

D. Lack of an appropriate response to a risk in an activity's risk register

A. Share

B. Reduce

C. Transfer

D. Enhance

A. Record identified risks

B. Update the residual risk exposure

C. Identify risk owners

D. Revise risk descriptions as necessary

A. Future developments that are at the margins of current thinking and planning

B. Identification of who should communicate with key stakeholders involved in an activity

C. External factors that may have an impact on an activity

D. Risks identified on previous similar activities

A. Obtain information about the external factors that may affect the planned activity

B. Calculate the total risk exposure to the activity

C. Understand the organization's approach to managing risk

D. Gather information about threats to the organization that may reduce the likelihood of the activity succeeding