7.12

Risk Assessment

Principle 7 - Identify, Analyze, and Respond to Risks

Attribute 7.12 - When designing controls to mitigate risk, management may modify controls related to the entity's oversight responsibilities, organizational structure, and responsibilities and authorities throughout the entity. Management may also develop separate processes within the periodic and ongoing risk assessment process with separate oversight responsibilities, to manage certain risks as part of the entity's overall internal control system. This may be necessary to achieve objectives due to the nature of certain types of risks, such as for risks related to fraud, improper payments, or information security, or when a risk is pervasive or has an impact on multiple processes. These separate processes would cover all components of internal control related to these specific risks.

>>>Navigational Buttons<<<

• Index of Attributes
• Previous Attribute - ?
• Next Attribute - ?