Skip to content

ACCA Strategic Professional · Strategic Business Leader · Managing, monitoring and mitigating risk

Brightwell Logistics is designing its risk process in line with ISO 31000. The risk manager proposes that the process of identifying, analysing and evaluating risks should be completed once a year by a specialist team, then filed until the next cycle. Which feature of ISO 31000 does this proposal most clearly contradict?

The proposal contradicts ISO 31000's principle that risk management is dynamic, iterative and responsive to change, supported by continual communication, consultation, monitoring and review. A once-a-year exercise filed away cannot respond to emerging risks or changing context, so it falls short of the standard.

  1. AThe requirement that all risks must be eliminated rather than treated
  2. BThe principle that risk management is dynamic, iterative and responsive to change, with continual communication and monitoringCorrect
  3. CThe rule that only financial risks fall within scope
  4. DThe requirement that risk treatment is delegated entirely to internal audit

Explanation

ISO 31000 states that risk management should be dynamic, iterative and responsive to change, with communication, consultation, monitoring and review throughout. An annual filed exercise ignores this. The other options misstate ISO 31000, which does not require elimination of all risks, limit scope to financial risk, or assign treatment to internal audit.

Did you get it right without looking?

One question tells you little. A timed set on Managing, monitoring and mitigating risk shows your real accuracy, how long you take and where you lose marks.

More Managing, monitoring and mitigating risk questions