7.13

Risk Assessment

Principle 7 - Identify, Analyze, and Respond to Risks

Attribute 7.13 - After designing risk responses, management then considers residual risk. In instances where a risk response results in the residual risk exceeding defined risk tolerances, management revisits and revises the response. Operating within the defined risk tolerance provides greater assurance that the entity will achieve its objectives.