The auditor finds that thecustomer risk assessment (CRA) is completed at initial onboarding and is repealed for each customer every other year. The auditor’s observations should Include that the CRA should:
Which statements demonstrate an effective use of risk appetite in an organization? (Select Two.)
Findings from a financial institution's (Fl's) regulatory examination suggest that several unidentified risks pose a serious threat. The Fl identifies the risks and implements a set of controls to mitigate those risks. Which type of risk considers the controls' effectiveness?
Which should be requested from a financial institution (FI) prior to beginning a data integrity review?
An audit determines that an important control is not being performed. The operational manager responds to the audit comment stating that they do not have adequate resources in the department to accomplish this task. The audit item discussion between the auditor and the operational manager is a(n):