Risk Appetite and Risk Tolerance CGEIT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A multinational corporation is establishing its enterprise risk appetite. The board wants to ensure that the appetite statement reflects the expectations of shareholders, regulators, and customers. Which of the following approaches is most appropriate?

   • ADevelop the appetite statement based primarily on the CEO's vision and the company's strategic plan.
   • BEngage key stakeholders, including the board, executive management, and regulatory affairs, to align the appetite with strategic objectives and compliance requirements.
   • CSet the appetite to match industry benchmarks to ensure competitiveness, regardless of internal stakeholder input.
   • DAdopt the risk appetite of a peer company to save time and ensure market acceptance.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has updated its risk appetite to be more conservative due to regulatory pressure. The board wants to ensure that all employees understand the change and adjust their behavior accordingly. Which of the following is the most effective way to communicate the change?

   • ASend an email to all employees describing the new risk appetite.
   • BHold a series of town hall meetings where executives explain the new risk appetite and answer questions.
   • CInclude the new risk appetite in the employee handbook.
   • DUpdate the risk appetite statement on the company intranet.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which statement correctly distinguishes risk appetite from risk tolerance?

   • ARisk appetite is a broad statement of willingness to take risk, while risk tolerance is the acceptable deviation from that appetite
   • BRisk appetite is the residual risk, while risk tolerance is the inherent risk
   • CRisk appetite is set by regulators, while risk tolerance is set by the board
   • DRisk appetite is quantitative, while risk tolerance is qualitative
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best defines risk tolerance?

   • AThe risk that is accepted without any further action
   • BThe risk that remains after all controls are implemented
   • CThe acceptable deviation from risk appetite levels
   • DThe total amount of risk an organization is willing to accept
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A technology company has just updated its risk appetite statement to reflect a more aggressive growth strategy. The board wants to ensure that all employees understand and apply the new appetite in their daily decisions. Which of the following is the most effective way to communicate and integrate the risk appetite?

   • AIntegrate the risk appetite into decision-making frameworks, such as investment criteria and project approval processes, and provide targeted training to relevant teams.
   • BPublish the risk appetite statement on the company intranet and require employees to read it annually.
   • CConduct a one-time training session for all employees to explain the new risk appetite.
   • DSend a company-wide email from the CEO describing the new risk appetite.
   Reveal Solution Discussion Select an answer first