최신OCEG GRC Professional Certification - GRCP무료샘플문제

A. The Fourth Line, which is the Governing Authority (Board)

B. The Fourth Line, which is the Executive Team

C. The Third Line, which may include internal audit, external audit, or outside experts

D. The Fourth Line, which is the Human Resources department

A. Culture change is not necessary as long as the organization is meeting its financial targets.

B. Culture change is solely dependent on the decisions made by the executive leadership team and how they model desired behavior.

C. Culture change can be achieved quickly through the implementation of new policies and procedures if there is adequate training provided.

D. Culture change requires long-term commitment, consistent modeling in both words and deeds, and reinforcement by leaders and the workforce.

A. Assessing the organization's ability to attract and retain top talent that is willing to take risks to achieve objectives.

B. Determining the level of risk-taking that each employee is comfortable with.

C. Analyzing the climate and mindsets about how the workforce perceives risk, its impact on work, and its integration with decision-making.

D. Evaluating the organization's risk appetite and tolerance levels for each type of risk.

A. Assurance is the act of objectively and competently evaluating subject matter to provide justified conclusions and confidence that statements and beliefs about the subject matter are true

B. Assurance is the establishment of policies and procedures to ensure compliance with applicable laws and regulations

C. Assurance is the process of identifying and mitigating risks that could negatively impact the organization's objectives

D. Assurance is the practice of monitoring and controlling the organization's financial performance and reporting

A. Non-Economic Incentives

B. Personal Incentives

C. Contractual Incentives

D. Economic Incentives

A. To provide timely incentives to employees for favorable conduct

B. To establish a tiered approach for responding to unfavorable events

C. To uncover root causes of favorable and unfavorable events and improve proactive, detective, and responsive actions and controls

D. To determine if, when, how, and what to disclose regarding unfavorable events

A. Prescriptive norms are optional guidelines, while proscriptive norms are mandatory rules.

B. Prescriptive norms are established by government regulations, while proscriptive norms are established by industry standards.

C. Prescriptive norms are related to financial performance, while proscriptive norms are related to ethical behavior.

D. Prescriptive norms encourage behavior the group deems positive, while proscriptive norms discourage behavior the group deems negative.

A. Stock options, salary increases, bonuses, and profit-sharing

B. Health insurance, retirement plans, paid time off, and sick leave

C. Appreciation, status, professional development

D. Gift baskets, extra vacation time, and employee competitions

A. Assurance Efficiency and Assurance Effectiveness

B. Assurance Objectivity and Assurance Competence

C. Assurance Consistency and Assurance Reliability

D. Assurance Transparency and Assurance Accountability

A. They establish the organization's code of conduct

B. They set voluntary boundaries for how the organization operates and often explain design decisions about the operating model

C. They determine the organization's market share and competitive positioning as part of assessing its financial value to shareholders

D. They dictate the organization's pricing strategy and revenue generation