The board has not delegated responsibility for risk oversight and therefore does not receive regular reports on the organization’s most significant risks.
This situation signals that there is a potential problem related to which of the following?
The situation represents a governance deficiency because oversight of significant organizational risks is a fundamental responsibility of the board. Whether the board performs detailed oversight directly or delegates specific monitoring activities to a committee, it must receive sufficient and timely risk information to fulfill its accountability. Failure to receive regular reports regarding major risks prevents the board from evaluating whether exposures remain consistent with organizational objectives and risk appetite. The issue does not primarily concern internal audit authority or the construction of the risk-based audit plan. Although communication is involved, the deeper problem is that the governance structure has not ensured appropriate risk oversight and reporting. Effective governance requires mechanisms through which significant risks are escalated to the board and monitored appropriately. Therefore, the deficiency relates primarily to organizational governance.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit