ACCA Strategic Professional · Strategic Business Leader · Managing, monitoring and mitigating risk
Halden Logistics has a risk register that the board reviews annually. During the year a major supplier failed and a new cyber threat emerged, yet neither appeared on the register until the next annual review. Which weakness in risk monitoring does this most directly show?
The weakness is that risk monitoring is periodic rather than continuous. Because the register is only reviewed annually, new and changing risks such as the supplier failure and cyber threat were not identified and reassessed promptly, so the board's view of risk was out of date.
- ARisk monitoring is not continuous, so new and changing risks are not captured and reassessed on a timely basisCorrect
- BThe company has used risk avoidance where risk transfer would have been more suitable
- CThe risk appetite is too low relative to the company's strategy
- DInternal audit is too independent of operational management
Explanation
Effective monitoring should be ongoing and responsive so that emerging risks and changes in existing risks are identified promptly. An annual-only review leaves the register out of date between reviews. The risk appetite and independence options do not explain why the new risks were missed.
Did you get it right without looking?
One question tells you little. A timed set on Managing, monitoring and mitigating risk shows your real accuracy, how long you take and where you lose marks.
More Managing, monitoring and mitigating risk questions
- Orlan Pharma plans to outsource its clinical trial data processing to a specialist firm, reasoning that this will 'transfer' the risk of dat…
- Brindle Foods, a mid-sized manufacturer, has listed a risk that a key supplier may fail. The risk committee rates the likelihood as low but …
- Marlowe Retail is deciding how to respond to a risk of supplier failure. It signs a contract with a second supplier so that supply continues…
- Orchid Bank has a business continuity plan that includes an alternative data centre. Management states that the plan has been approved by th…
- Zephyr Logistics Ltd has a board that wants a risk management approach in which the board sets risk appetite, management owns risks day to d…
- Karuna Logistics assesses each identified risk by scoring likelihood and impact from 1 to 5 and multiplying them. A data-centre outage score…