Which of the following statements best describes conduct risk? Select one: a. Deceptive marketing practices in breach of consumer laws. b. Deliberate impact to the environment in breach of environmental protection laws. c. Behaviour that unfairly favours one group of stakeholders over another. d. All of the other options.

Which of the following statements accurately describe risk? Select all that apply.1 pointAnother way to think of risk is the likelihood of a threat occurring.If compromised, a low-risk asset would have a severe negative impact on an organization’s ongoing reputation.A high-risk asset is any information protected by regulations or laws.If compromised, a medium-risk asset may cause some damage to an organization's ongoing operations.9.Question 9

A company is fined for causing physical damage that is in breach of environmental laws and regulations. Using the impact method of classifying risks, which of the following categories best describes this risk? a. Strategic b. Operational c. People d. Financial

Which of the following is NOT an example of a risk statement?Select answer from the options belowA single employee authorizing and paying invoices may result in fraudulent payments being disbursed to fake vendors.Adopting new technology may result in gaining competitive advantage and market share.Unauthorized access to the data center may result in physical theft of computer equipment.Delivery drivers not receiving road safety training may result in reputational damage due to accidents in the community.

Which of the following statements accurately describe risk? Select all that apply.1 pointWebsite content or published research data are examples of low-risk assets.If compromised, a medium-risk asset may cause some damage to an organization's finances. If compromised, a high-risk asset is unlikely to cause financial damage. Organizations often rate risks at different levels: low, medium, and high.

Which one of the following statements is TRUE. Strategic risk is: Select one: a. undesirable and an organisation should avoid the risk b. not referred to in AS ISO 31000 c. a less significant source of value destruction than operational risks d. the risk of choosing a bad strategy and the risk of badly executing the chosen strategy