6.10

Risk Assessment

Principle 6 - Define Objectives and Risk Tolerances

Attribute 6.10 - Management also evaluates whether risk tolerances enable the appropriate design of internal control by considering whether they are consistent with requirements and expectations for the defined objectives. As in defining objectives, management considers the risk tolerances in the context of the entity's applicable laws, regulations, and standards as well as the entity's standards of conduct, oversight structure, organizational structure, and expectations of competence. If risk tolerances for defined objectives are not consistent with these requirements and expectations, management revises the risk tolerances to achieve consistency.

>>>Navigational Buttons<<<

• Index of Attributes
• Previous Attribute - 6.09
• Next Attribute - 7.01