CProf (SA) Practice Questions - CISA Compliance Professional CProf (SA) Board Examination Exam

Inherent risk evaluates risk after controls are applied, while residual risk evaluates risk before controls Inherent risk assesses exposure assuming no internal controls are in place, while residual risk is the remaining exposure after accounting for control effectiveness Inherent risk applies only to financial penalties, while residual risk applies only to reputational damage Inherent risk is determined by regulators, while residual risk is determined exclusively by external auditors