Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IIA Exam IIA-IAP Topic 4 Question 3 Discussion

Actual exam question for IIA's IIA-IAP exam
Question #: 3
Topic #: 4
[All IIA-IAP Questions]

Management has decided that transactions less than $50 no longer require authorization. Which of the following risk management strategies does this represent?

Show Suggested Answer Hide Answer
Suggested Answer: B

Comprehensive and Detailed Step-by-Step Explanation:

Risk Acceptance: By deciding that transactions below $50 do not require authorization, management is consciously accepting the low-level risk associated with this decision to streamline processes and reduce administrative burdens.


Other Options:

Option A: Risk avoidance would involve eliminating the activity altogether, which is not the case here.

Option C: Risk reduction would involve implementing controls to mitigate the risk, not eliminating authorization requirements.

Thus, the correct answer is B. Accept.

Contribute your Thoughts:

Taryn
6 days ago
Hmm, I'm not so sure. This could also be considered a risk reduction strategy, as they're setting a threshold to minimize the potential impact of unauthorized transactions.
upvoted 0 times
...
Vallie
8 days ago
I think this is a classic case of risk acceptance. Management is willing to accept the risk of smaller transactions without authorization to save time and resources.
upvoted 0 times
...
Izetta
10 days ago
Yeah, it's definitely an 'Accept' risk management strategy.
upvoted 0 times
...
Paris
30 days ago
I agree. It seems like they are accepting the risk.
upvoted 0 times
...
Tommy
1 months ago
I think it's a risky move.
upvoted 0 times
...
Dustin
1 months ago
I can't believe management is doing this.
upvoted 0 times
...

Save Cancel