7.03: Difference between revisions
Created page with "'''Risk Assessment''' '''Principle 7 - Identify, Analyze, and Respond to Risks''' '''Attribute''' '''7.03''' - To identify risks, management considers the types of risks that impact the entity. This includes both inherent and residual risk. Inherent risk is the risk to an entity in the absence of management's response to the risk. Residual risk is the risk that remains after management's response to inherent risk. Once risk responses have been developed to address inhe..." |
|||
| (4 intermediate revisions by the same user not shown) | |||
| Line 4: | Line 4: | ||
'''Attribute''' '''7.03''' - To identify risks, management considers the types of risks that impact the entity. This includes both inherent and residual risk. Inherent risk is the risk to an entity in the absence of management's response to the risk. Residual risk is the risk that remains after management's response to inherent risk. Once risk responses have been developed to address inherent risk, management then considers the impact or significance of the residual risk that remains and whether it is at an acceptable level within the defined risk tolerances. Assessing inherent and residual risk can assist management in understanding the extent of risk responses needed. Management's lack of response to either type of risk could cause deficiencies in the internal control system. | '''Attribute''' '''7.03''' - To identify risks, management considers the types of risks that impact the entity. This includes both inherent and residual risk. Inherent risk is the risk to an entity in the absence of management's response to the risk. Residual risk is the risk that remains after management's response to inherent risk. Once risk responses have been developed to address inherent risk, management then considers the impact or significance of the residual risk that remains and whether it is at an acceptable level within the defined risk tolerances. Assessing inherent and residual risk can assist management in understanding the extent of risk responses needed. Management's lack of response to either type of risk could cause deficiencies in the internal control system. | ||
'''>>>Navigational Buttons<<<''' | |||
* '''[[Index of Attributes]]''' | |||
* '''Previous Attribute - [[7.02]]''' | |||
* '''Next Attribute - [[7.04]]''' | |||
__FORCETOC__ | |||
=== Jamie's Story === | |||
No examples | |||
=== Election Anomalies === | |||
Principle 7 addresses the need to Identify, Analyze, and Respond to Risks. The identification and analysis of risk are presumed to have been performed at the state level, which are addressed in the [https://apps.azsos.gov/election/files/epm/2025/Election-Procedures-Manual-2025--FINAL-12-22-25.pdf Arizona Secretary of State's Election Procedure Manual.] The MC leadership team's <u>Response to Risk</u> is the primary governance weakness with respect to the Green Book's Principle #7, including this attribute. | |||
Latest revision as of 08:46, 25 August 2026
Risk Assessment
Principle 7 - Identify, Analyze, and Respond to Risks
Attribute 7.03 - To identify risks, management considers the types of risks that impact the entity. This includes both inherent and residual risk. Inherent risk is the risk to an entity in the absence of management's response to the risk. Residual risk is the risk that remains after management's response to inherent risk. Once risk responses have been developed to address inherent risk, management then considers the impact or significance of the residual risk that remains and whether it is at an acceptable level within the defined risk tolerances. Assessing inherent and residual risk can assist management in understanding the extent of risk responses needed. Management's lack of response to either type of risk could cause deficiencies in the internal control system.
>>>Navigational Buttons<<<
- Index of Attributes
- Previous Attribute - 7.02
- Next Attribute - 7.04
Jamie's Story
No examples
Election Anomalies
Principle 7 addresses the need to Identify, Analyze, and Respond to Risks. The identification and analysis of risk are presumed to have been performed at the state level, which are addressed in the Arizona Secretary of State's Election Procedure Manual. The MC leadership team's Response to Risk is the primary governance weakness with respect to the Green Book's Principle #7, including this attribute.
