8.19

Risk Assessment

Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk

Attribute 8.19 - Management responds to fraud, improper payment, and information security risks consistent with the risk response process performed for all analyzed risks. Based on the selected risk response, management determines the specific actions to effectively mitigate each risk. It may be possible to reduce or avoid certain fraud, improper payment, or information security risks by making changes to the entity's activities and processes. These changes may include stopping or reorganizing certain operations, modifying the entity's information technology, reallocating roles among personnel to enhance segregation of duties, or designing or modifying control activities. Management may also need to develop further responses to address the risk of management override of controls, particularly when considering fraud risks

>>>Navigational Buttons<<<

• Index of Attributes
• Previous Attribute - ?
• Next Attribute - ?