Which of the following would be considered a monitoring activity in organization wide risk management?

Which of the following would be considered a monitoring activity in organization wide risk management?
A . Validate the results of management’s self-assessment.
B . Perform reviews of personnel.
C . Maintain rigorous and comprehensive documentation.
D . Obtain authorizations and signatures.

View Answer

Answer: A

Explanation:

A monitoring activity in organization-wide risk management would include validating the results of management’s self-assessment. This activity ensures that risk management processes are effective and that self-assessments accurately reflect the risk status, aligning with the role of internal audit in providing assurance over risk management activities.

Reference: COSO framework for risk management; IIA guidance on risk management.