{"id":2157,"date":"2026-04-24T09:33:32","date_gmt":"2026-04-24T09:33:32","guid":{"rendered":"https:\/\/exam.real4prep.com\/?p=2157"},"modified":"2026-04-24T09:33:32","modified_gmt":"2026-04-24T09:33:32","slug":"2026-8020-all-in-one-exam-guide-practice-to-your-8020-exam-q10-q30","status":"publish","type":"post","link":"https:\/\/exam.real4prep.com\/de\/2026\/04\/24\/2026-8020-all-in-one-exam-guide-practice-to-your-8020-exam-q10-q30\/","title":{"rendered":"[2026] 8020 All-in-One Exam Guide Practice To your 8020 Exam! [Q10-Q30]"},"content":{"rendered":"\n\n<div class=\"kk-star-ratings kksr-auto kksr-align-left kksr-valign-top\"\n    data-payload='{&quot;align&quot;:&quot;left&quot;,&quot;id&quot;:&quot;2157&quot;,&quot;slug&quot;:&quot;default&quot;,&quot;valign&quot;:&quot;top&quot;,&quot;ignore&quot;:&quot;&quot;,&quot;reference&quot;:&quot;auto&quot;,&quot;class&quot;:&quot;&quot;,&quot;count&quot;:&quot;0&quot;,&quot;legendonly&quot;:&quot;&quot;,&quot;readonly&quot;:&quot;&quot;,&quot;score&quot;:&quot;0&quot;,&quot;starsonly&quot;:&quot;&quot;,&quot;best&quot;:&quot;5&quot;,&quot;gap&quot;:&quot;5&quot;,&quot;greet&quot;:&quot;Rate this post&quot;,&quot;legend&quot;:&quot;0\\\/5 - (0 votes)&quot;,&quot;size&quot;:&quot;24&quot;,&quot;title&quot;:&quot;[2026] 8020 All-in-One Exam Guide Practice To your 8020 Exam! [Q10-Q30]&quot;,&quot;width&quot;:&quot;0&quot;,&quot;_legend&quot;:&quot;{score}\\\/{best} - ({count} {votes})&quot;,&quot;font_factor&quot;:&quot;1.25&quot;}'>\n            \n<div class=\"kksr-stars\">\n    \n<div class=\"kksr-stars-inactive\">\n            <div class=\"kksr-star\" data-star=\"1\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"2\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"3\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"4\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" data-star=\"5\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n    <\/div>\n    \n<div class=\"kksr-stars-active\" style=\"width: 0px;\">\n            <div class=\"kksr-star\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n            <div class=\"kksr-star\" style=\"padding-right: 5px\">\n            \n\n<div class=\"kksr-icon\" style=\"width: 24px; height: 24px;\"><\/div>\n        <\/div>\n    <\/div>\n<\/div>\n                \n\n<div class=\"kksr-legend\" style=\"font-size: 19.2px;\">\n            <span class=\"kksr-muted\">Rate this post<\/span>\n    <\/div>\n    <\/div>\n<p><span style=\"font-size: 18px\"><strong><span style=\"color: red\">[2026] 8020 All-in-One Exam Guide Practice To your 8020 Exam!<\/span><\/strong><\/span><\/p>\n<p><strong><span style=\"color: red\">Preparations of 8020 Exam 2026 PRM Certification Unlimited 62 Questions<\/span><\/strong><\/p>\n<p><\/p>\n<h3>PRMIA 8020 Exam Syllabus Topics:<\/h3>\n<table border=\"1\" cellpadding=\"1\" cellspacing=\"1\" style=\"width:100%\">\n<tr>\n<th width=\"100px\">Topic<\/th>\n<th>Details<\/th>\n<\/tr>\n<tr>\n<td>Topic 1<\/td>\n<td>\n<ul>\n<li>Case Studies: This section of the exam measures the skills of Business Risk Consultants and covers real-world applications of risk management concepts. It examines case studies on risk governance, assessment, and mitigation strategies across different industries. A key skill measured is analyzing historical risk events for strategic insights.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>Topic 2<\/td>\n<td>\n<ul>\n<li>Risk Modeling: This section of the exam measures the skills of Quantitative Risk Analysts and covers mathematical and statistical techniques used to predict risk scenarios. It explores model development, validation, and application in financial and operational risk management. A key skill measured is applying statistical models for risk prediction.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>Topic 3<\/td>\n<td>\n<ul>\n<li>Risk Governance: This section of the exam measures the skills of Compliance Officers and covers the policies, structures, and processes that define how organizations oversee risk. It explores regulatory compliance, ethical considerations, and corporate governance frameworks to ensure accountability. A key skill measured is applying governance frameworks to organizational risk policies.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>Topic 4<\/td>\n<td>\n<ul>\n<li>Risk Assessment: This section of the exam measures the skills of Financial Risk Analysts and covers methodologies for evaluating risks in different domains, including qualitative and quantitative approaches. It focuses on assessing vulnerabilities, threats, and potential impacts on business operations. A key skill measured is conducting risk impact analysis for financial threats.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>Topic 5<\/td>\n<td>\n<ul>\n<li>Introduction: This section of the exam measures the skills of Risk Analysts and covers fundamental concepts of risk governance, management, and assessment. It introduces key principles, regulatory frameworks, and industry best practices for identifying and addressing risks. A key skill measured is understanding the foundational principles of risk management.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>Topic 6<\/td>\n<td>\n<ul>\n<li>Risk Management Framework: This section of the exam measures the skills of Risk Managers and covers the development and implementation of structured approaches for risk identification, evaluation, and mitigation. It includes industry-standard frameworks that guide risk strategy and decision-making. A key skill measured is establishing a risk management framework for organizations.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/table>\n<p><\/p>\n<p>&nbsp;<\/p>\n<div id=\"watu_quiz\" class=\"quiz-area single-page-quiz\">\n<form action=\"\" method=\"post\" class=\"quiz-form \" id=\"quiz-848\" >\n<div class='watu-question' id='question-1'><div class='question-content'><p><strong>QUESTION 10<\/strong><br \/>Process mapping is:<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16665' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64574' \/><div class='watu-question-choice'><input type='radio' name='answer-16665[]' id='answer-id-64574' class='answer answer-1 js-answer-label answerof-16665' value='64574' \/>&nbsp;<label for='answer-id-64574' id='answer-label-64574' class='js-answer-label answer label-1'><span class='answer'>A useful tool for understanding process intensive activities.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64575' \/><div class='watu-question-choice'><input type='radio' name='answer-16665[]' id='answer-id-64575' class='answer answer-1 js-answer-label answerof-16665' value='64575' \/>&nbsp;<label for='answer-id-64575' id='answer-label-64575' class='js-answer-label answer label-1'><span class='answer'>A helpful tool for understanding where control gaps may exist.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64576' \/><div class='watu-question-choice'><input type='radio' name='answer-16665[]' id='answer-id-64576' class='answer answer-1 js-answer-label answerof-16665' value='64576' \/>&nbsp;<label for='answer-id-64576' id='answer-label-64576' class='js-answer-label answer label-1'><span class='answer'>A good visualization tool for understanding where hand-offs and hand-ins may occur.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64577' \/><div class='watu-question-choice'><input type='radio' name='answer-16665[]' id='answer-id-64577' class='answer answer-1 php-answer-label answerof-16665' value='64577' \/>&nbsp;<label for='answer-id-64577' id='answer-label-64577' class='php-answer-label answer label-1'><span class='answer'>All of the above.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Process Mapping is a risk management tool used to visualize workflows, identify inefficiencies, and detect control gaps. PRMIA defines process mapping as an essential operational risk management tool.<br\/>Step 1: Understanding Process Mapping<br\/>Helps analyze complex, process-intensive activities (Option A).<br\/>Reveals control weaknesses that could lead to operational risks (Option B).<br\/>Improves hand-offs and collaboration between teams (Option C).<br\/>Step 2: Why &#8220;All of the Above&#8221; is Correct<br\/>Process mapping serves multiple risk management purposes, making all listed options valid.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA Operational Risk Management Guidelines &#8211; Recommends process mapping to identify inefficiencies and control gaps.<br\/>PRMIA Risk Governance Framework &#8211; Encourages visualization tools for process improvement.<br\/>Final Conclusion:<br\/>Process mapping improves risk awareness, identifies control gaps, and enhances operational workflows, making Option D the correct answer.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(1,this)' id='btn-1' value='See Answer'  \/><input type='hidden' id='questionType1' value='radio' class=''><\/div><div class='watu-question' id='question-2'><div class='question-content'><p><strong>QUESTION 11<\/strong><br \/>Managing financial crime is a part of risk and compliance for many firms. Which of the following is a useful control to help reduce this risk?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16666' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64578' \/><div class='watu-question-choice'><input type='radio' name='answer-16666[]' id='answer-id-64578' class='answer answer-2 js-answer-label answerof-16666' value='64578' \/>&nbsp;<label for='answer-id-64578' id='answer-label-64578' class='js-answer-label answer label-2'><span class='answer'>Having the business be a cash only business and not report any transactions.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64579' \/><div class='watu-question-choice'><input type='radio' name='answer-16666[]' id='answer-id-64579' class='answer answer-2 js-answer-label answerof-16666' value='64579' \/>&nbsp;<label for='answer-id-64579' id='answer-label-64579' class='js-answer-label answer label-2'><span class='answer'>The requirements to trace all transactions when they are entered into spreadsheets.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64580' \/><div class='watu-question-choice'><input type='radio' name='answer-16666[]' id='answer-id-64580' class='answer answer-2 php-answer-label answerof-16666' value='64580' \/>&nbsp;<label for='answer-id-64580' id='answer-label-64580' class='php-answer-label answer label-2'><span class='answer'>Development of scenarios and red flags that are used to monitor transactions and identify suspicious customers and activities.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64581' \/><div class='watu-question-choice'><input type='radio' name='answer-16666[]' id='answer-id-64581' class='answer answer-2 js-answer-label answerof-16666' value='64581' \/>&nbsp;<label for='answer-id-64581' id='answer-label-64581' class='js-answer-label answer label-2'><span class='answer'>Local regulations that allow a bank to not report transactions by family members of the board.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Financial Crime Risk Management<br\/>Managing financial crime requires implementing controls, monitoring, and reporting systems to detect and prevent illegal activities.<br\/>Developing red flags and monitoring scenarios allows firms to detect suspicious transactions related to money laundering, fraud, and terrorist financing.<br\/>Why Answer C is Correct<br\/>PRMIA emphasizes that effective risk management requires proactive monitoring of transactions using red flags, transaction patterns, and anomaly detection systems.<br\/>This is aligned with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulatory requirements.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Having the business be a cash-only business and not report any transactions.<br\/>Incorrect &#8211; Cash-only businesses with no reporting are high-risk for financial crime.<br\/>B . The requirements to trace all transactions when they are entered into spreadsheets.<br\/>Incorrect &#8211; While transaction tracing is important, spreadsheets alone are not an effective control mechanism for financial crime.<br\/>D . Local regulations that allow a bank to not report transactions by family members of the board.<br\/>Incorrect &#8211; This would violate AML and financial crime regulations, increasing corruption risk.<br\/>PRMIA Reference for Verification<br\/>PRMIA Financial Crime and AML Risk Guidelines<br\/>Basel Committee on Financial Crime and Money Laundering<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(2,this)' id='btn-2' value='See Answer'  \/><input type='hidden' id='questionType2' value='radio' class=''><\/div><div class='watu-question' id='question-3'><div class='question-content'><p><strong>QUESTION 12<\/strong><br \/>Which of the following statements best defines the properties of top-down key risk indicators?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16667' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64582' \/><div class='watu-question-choice'><input type='radio' name='answer-16667[]' id='answer-id-64582' class='answer answer-3 php-answer-label answerof-16667' value='64582' \/>&nbsp;<label for='answer-id-64582' id='answer-label-64582' class='php-answer-label answer label-3'><span class='answer'>Selected by senior management, tied to material external and internal loss exposures and scenarios, and used to manage changes in the business environment, especially under periods of stress.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64583' \/><div class='watu-question-choice'><input type='radio' name='answer-16667[]' id='answer-id-64583' class='answer answer-3 js-answer-label answerof-16667' value='64583' \/>&nbsp;<label for='answer-id-64583' id='answer-label-64583' class='js-answer-label answer label-3'><span class='answer'>Selected by senior management, used to manage changes in the business environment especially under periods of stress, and reported on a daily basis.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64584' \/><div class='watu-question-choice'><input type='radio' name='answer-16667[]' id='answer-id-64584' class='answer answer-3 js-answer-label answerof-16667' value='64584' \/>&nbsp;<label for='answer-id-64584' id='answer-label-64584' class='js-answer-label answer label-3'><span class='answer'>Selected by junior management, used to manage changes in the business environment especially under periods of stress, and reported on an annual basis<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64585' \/><div class='watu-question-choice'><input type='radio' name='answer-16667[]' id='answer-id-64585' class='answer answer-3 js-answer-label answerof-16667' value='64585' \/>&nbsp;<label for='answer-id-64585' id='answer-label-64585' class='js-answer-label answer label-3'><span class='answer'>Can only be selected by the board in line with risk ratings.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Definition of Key Risk Indicators (KRIs)<br\/>KRIs are quantitative metrics used to monitor risk levels and detect early warning signs of potential risk events.<br\/>Top-down KRIs are identified at the senior management level and focus on enterprise-wide risk exposure.<br\/>Key Properties of Top-Down KRIs<br\/>Selected by senior management to ensure alignment with strategic objectives.<br\/>Tied to material external and internal loss exposures to capture critical financial, operational, and strategic risks.<br\/>Used to manage changes in the business environment to ensure proactive risk response, especially under stress conditions.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>B . Selected by senior management, used to manage changes in the business environment, especially under periods of stress, and reported on a daily basis.<br\/>Incorrect &#8211; Top-down KRIs are not reported daily; they are monitored periodically (e.g., quarterly).<br\/>C . Selected by junior management, used to manage changes in the business environment, especially under periods of stress, and reported on an annual basis.<br\/>Incorrect &#8211; Junior management does not define top-down KRIs; senior management does. Also, annual reporting is too infrequent.<br\/>D . Can only be selected by the board in line with risk ratings.<br\/>Incorrect &#8211; The board provides oversight, but senior risk management selects KRIs, not just the board.<br\/>PRMIA Reference for Verification<br\/>PRMIA Risk Indicator Guidelines<br\/>Basel Committee on Banking Supervision (BCBS) Principles for Effective Risk Data Aggregation<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(3,this)' id='btn-3' value='See Answer'  \/><input type='hidden' id='questionType3' value='radio' class=''><\/div><div class='watu-question' id='question-4'><div class='question-content'><p><strong>QUESTION 13<\/strong><br \/>What are some of the properties of Bottom-Up KRIs?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16668' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64586' \/><div class='watu-question-choice'><input type='radio' name='answer-16668[]' id='answer-id-64586' class='answer answer-4 js-answer-label answerof-16668' value='64586' \/>&nbsp;<label for='answer-id-64586' id='answer-label-64586' class='js-answer-label answer label-4'><span class='answer'>Seated by senior management: tied to internal loss events at the legal entity, country, business and \/ or product level, reported.<br \/>daily, weekly or monthly.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64587' \/><div class='watu-question-choice'><input type='radio' name='answer-16668[]' id='answer-id-64587' class='answer answer-4 js-answer-label answerof-16668' value='64587' \/>&nbsp;<label for='answer-id-64587' id='answer-label-64587' class='js-answer-label answer label-4'><span class='answer'>Selected by local management, based on key controls or weaknesses identified by audit reports, reported on quarterly.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64588' \/><div class='watu-question-choice'><input type='radio' name='answer-16668[]' id='answer-id-64588' class='answer answer-4 js-answer-label answerof-16668' value='64588' \/>&nbsp;<label for='answer-id-64588' id='answer-label-64588' class='js-answer-label answer label-4'><span class='answer'>Are not used due to changes in regulations.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64589' \/><div class='watu-question-choice'><input type='radio' name='answer-16668[]' id='answer-id-64589' class='answer answer-4 php-answer-label answerof-16668' value='64589' \/>&nbsp;<label for='answer-id-64589' id='answer-label-64589' class='php-answer-label answer label-4'><span class='answer'>Selected by local management: tied to internal loss events at the legal entity, country, business and \/ or product level, reported daily, weekly or monthly.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Definition of Bottom-Up KRIs<br\/>Bottom-Up Key Risk Indicators (KRIs) are identified at the operational level, focusing on localized risks within business units.<br\/>They are tied to actual internal loss events and reported frequently (daily, weekly, or monthly) to capture ongoing trends.<br\/>Key Properties of Bottom-Up KRIs<br\/>Selected by local management \u2192 Ensures relevance to specific business areas.<br\/>Tied to internal loss events \u2192 Helps in tracking risk patterns within specific legal entities, countries, or business units.<br\/>Reported frequently \u2192 Allows for timely risk detection and mitigation.<br\/>Why Answer D is Correct<br\/>Bottom-up KRIs focus on localized risk exposure and are monitored frequently to track operational changes.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Seated by senior management: tied to internal loss events at the legal entity, country, business, and\/or product level, reported daily, weekly, or monthly.<br\/>Incorrect &#8211; Senior management sets top-down KRIs, while bottom-up KRIs are managed locally.<br\/>B . Selected by local management, based on key controls or weaknesses identified by audit reports, reported quarterly.<br\/>Incorrect &#8211; While audit reports are useful, bottom-up KRIs are based on loss events, not just audit findings. Quarterly reporting is too infrequent.<br\/>C . Are not used due to changes in regulations.<br\/>Incorrect &#8211; Bottom-up KRIs remain essential despite regulatory changes.<br\/>PRMIA Reference for Verification<br\/>PRMIA Risk Indicator Best Practices<br\/>Basel Committee&#8217;s Risk Measurement and Reporting Guidelines<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(4,this)' id='btn-4' value='See Answer'  \/><input type='hidden' id='questionType4' value='radio' class=''><\/div><div class='watu-question' id='question-5'><div class='question-content'><p><strong>QUESTION 14<\/strong><br \/>In relation to financial crime. OFAC is a definition for which organization?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16669' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64590' \/><div class='watu-question-choice'><input type='radio' name='answer-16669[]' id='answer-id-64590' class='answer answer-5 js-answer-label answerof-16669' value='64590' \/>&nbsp;<label for='answer-id-64590' id='answer-label-64590' class='js-answer-label answer label-5'><span class='answer'>Office of Financial Asset Control.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64591' \/><div class='watu-question-choice'><input type='radio' name='answer-16669[]' id='answer-id-64591' class='answer answer-5 js-answer-label answerof-16669' value='64591' \/>&nbsp;<label for='answer-id-64591' id='answer-label-64591' class='js-answer-label answer label-5'><span class='answer'>Office of Foreigner and other Control.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64592' \/><div class='watu-question-choice'><input type='radio' name='answer-16669[]' id='answer-id-64592' class='answer answer-5 js-answer-label answerof-16669' value='64592' \/>&nbsp;<label for='answer-id-64592' id='answer-label-64592' class='js-answer-label answer label-5'><span class='answer'>Office for Asset Control.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64593' \/><div class='watu-question-choice'><input type='radio' name='answer-16669[]' id='answer-id-64593' class='answer answer-5 php-answer-label answerof-16669' value='64593' \/>&nbsp;<label for='answer-id-64593' id='answer-label-64593' class='php-answer-label answer label-5'><span class='answer'>Office of Foreign Asset Control.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Step 1: Understanding OFAC<br\/>OFAC (Office of Foreign Assets Control) is a U.S. Treasury Department agency responsible for enforcing economic and trade sanctions based on U.S. foreign policy and national security goals.<br\/>It prevents financial crime by restricting transactions with sanctioned individuals, entities, and countries.<br\/>Step 2: Role of OFAC in Financial Crime Prevention<br\/>OFAC administers sanctions to prevent money laundering, terrorism financing, and other illicit activities.<br\/>Financial institutions must comply with OFAC regulations to avoid heavy fines and reputational damage.<br\/>PRMIA&#8217;s Financial Crime Risk Guidelines emphasize the importance of OFAC compliance in risk management.<br\/>Step 3: Why the Other Options Are Incorrect<br\/>Option A (&#8220;Office of Financial Asset Control&#8221;) &#8211; Incorrect wording; OFAC deals with foreign assets, not just financial assets.<br\/>Option B (&#8220;Office of Foreigner and Other Control&#8221;) &#8211; OFAC does not regulate foreigners broadly; it targets specific foreign assets and transactions.<br\/>Option C (&#8220;Office for Asset Control&#8221;) &#8211; Missing &#8220;Foreign&#8221;, which is critical to OFAC&#8217;s function.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA Financial Crime Risk Management Guidelines &#8211; Emphasizes regulatory compliance with OFAC.<br\/>PRMIA Compliance and Sanctions Risk Standards &#8211; Stresses the role of OFAC in preventing illicit financial activities.<br\/>Final Conclusion:<br\/>OFAC stands for the Office of Foreign Assets Control, making Option D the correct answer.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(5,this)' id='btn-5' value='See Answer'  \/><input type='hidden' id='questionType5' value='radio' class=''><\/div><div class='watu-question' id='question-6'><div class='question-content'><p><strong>QUESTION 15<\/strong><br \/>Risk Sensitive pricing is required for several good reasons. Which one of the following is not relevant to the Management&#8217;s evaluation of the correct approach to Risk Sensitive pricing?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16670' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64594' \/><div class='watu-question-choice'><input type='radio' name='answer-16670[]' id='answer-id-64594' class='answer answer-6 js-answer-label answerof-16670' value='64594' \/>&nbsp;<label for='answer-id-64594' id='answer-label-64594' class='js-answer-label answer label-6'><span class='answer'>To adequately reward the investors for the capital they gave us to put at risk.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64595' \/><div class='watu-question-choice'><input type='radio' name='answer-16670[]' id='answer-id-64595' class='answer answer-6 js-answer-label answerof-16670' value='64595' \/>&nbsp;<label for='answer-id-64595' id='answer-label-64595' class='js-answer-label answer label-6'><span class='answer'>To link personal targets to risk-adjusted return requirements would reinforce the desired risk aware, culture.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64596' \/><div class='watu-question-choice'><input type='radio' name='answer-16670[]' id='answer-id-64596' class='answer answer-6 js-answer-label answerof-16670' value='64596' \/>&nbsp;<label for='answer-id-64596' id='answer-label-64596' class='js-answer-label answer label-6'><span class='answer'>To avoid the build-up of a skewed quality property portfolio.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64597' \/><div class='watu-question-choice'><input type='radio' name='answer-16670[]' id='answer-id-64597' class='answer answer-6 php-answer-label answerof-16670' value='64597' \/>&nbsp;<label for='answer-id-64597' id='answer-label-64597' class='php-answer-label answer label-6'><span class='answer'>To ensure the income targets can be met or exceeded.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Risk-sensitive pricing ensures that financial institutions and businesses properly account for risk in their pricing strategies to maintain stability and sustainability. PRMIA&#8217;s Risk Pricing and Capital Adequacy Guidelines define the importance of risk-sensitive pricing in ensuring fair compensation for risk exposure and avoiding risk concentration issues.<br\/>Step 1: Why Risk-Sensitive Pricing Is Important<br\/>Aligns risk with return: Pricing should be designed to reflect the underlying risk and return trade-off.<br\/>Protects investors: Investors expect compensation for capital at risk (Option A is correct).<br\/>Reinforces risk-aware culture: PRMIA promotes linking incentives to risk-adjusted returns (Option B is correct).<br\/>Prevents adverse selection: Proper risk pricing prevents low-quality assets from accumulating (Option C is correct).<br\/>Step 2: Why Option D Is Incorrect<br\/>Income targets are business-driven, not risk-driven.<br\/>Risk-sensitive pricing aims to balance risk and reward, not just maximize revenue.<br\/>PRMIA discourages profit-seeking behavior at the expense of risk considerations.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA Risk Pricing Guidelines &#8211; Defines the principles of risk-sensitive pricing.<br\/>PRMIA Risk-Adjusted Return Standards &#8211; Stresses linking incentives to risk-aware decisions.<br\/>PRMIA Capital Adequacy Framework &#8211; Highlights the role of risk-sensitive pricing in portfolio management.<br\/>Final Conclusion:<br\/>Risk-sensitive pricing is designed to align returns with risk exposure, not simply to meet or exceed income targets, making Option D the correct answer.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(6,this)' id='btn-6' value='See Answer'  \/><input type='hidden' id='questionType6' value='radio' class=''><\/div><div class='watu-question' id='question-7'><div class='question-content'><p><strong>QUESTION 16<\/strong><br \/>The acronym ESG can stand for:<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16671' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64598' \/><div class='watu-question-choice'><input type='radio' name='answer-16671[]' id='answer-id-64598' class='answer answer-7 js-answer-label answerof-16671' value='64598' \/>&nbsp;<label for='answer-id-64598' id='answer-label-64598' class='js-answer-label answer label-7'><span class='answer'>Environmental. Strategy, and corporate Governance.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64599' \/><div class='watu-question-choice'><input type='radio' name='answer-16671[]' id='answer-id-64599' class='answer answer-7 php-answer-label answerof-16671' value='64599' \/>&nbsp;<label for='answer-id-64599' id='answer-label-64599' class='php-answer-label answer label-7'><span class='answer'>Environmental. Social and corporate Governance.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64600' \/><div class='watu-question-choice'><input type='radio' name='answer-16671[]' id='answer-id-64600' class='answer answer-7 js-answer-label answerof-16671' value='64600' \/>&nbsp;<label for='answer-id-64600' id='answer-label-64600' class='js-answer-label answer label-7'><span class='answer'>Enhanced Social Governance.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64601' \/><div class='watu-question-choice'><input type='radio' name='answer-16671[]' id='answer-id-64601' class='answer answer-7 js-answer-label answerof-16671' value='64601' \/>&nbsp;<label for='answer-id-64601' id='answer-label-64601' class='js-answer-label answer label-7'><span class='answer'>Extra Social Governance.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Step 1: Definition of ESG<br\/>ESG (Environmental, Social, and Corporate Governance) refers to the three core factors used to evaluate a company&#8217;s sustainability and ethical impact.<br\/>ESG is now a key part of risk management, influencing investment decisions, regulatory compliance, and corporate strategy.<br\/>Step 2: Breakdown of ESG Components<br\/>Environmental (E): Climate change, carbon emissions, resource management.<br\/>Social (S): Diversity &amp; inclusion, labor rights, community engagement.<br\/>Governance (G): Board structure, executive pay, corporate ethics.<br\/>Step 3: Why the Other Options Are Incorrect<br\/>Option A (&#8220;Environmental, Strategy, and Corporate Governance&#8221;)<br\/>Incorrect because Strategy is not part of ESG.<br\/>Option C (&#8220;Enhanced Social Governance&#8221;)<br\/>Incorrect because ESG covers more than just social governance.<br\/>Option D (&#8220;Extra Social Governance&#8221;)<br\/>Incorrect as it does not align with the recognized ESG definition.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA ESG Risk Management Guidelines &#8211; Defines ESG factors as Environmental, Social, and Governance.<br\/>PRI (Principles for Responsible Investment) &#8211; Aligns ESG with financial risk management.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(7,this)' id='btn-7' value='See Answer'  \/><input type='hidden' id='questionType7' value='radio' class=''><\/div><div class='watu-question' id='question-8'><div class='question-content'><p><strong>QUESTION 17<\/strong><br \/>Which of the following principles best applies to a compliance function?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16672' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64602' \/><div class='watu-question-choice'><input type='radio' name='answer-16672[]' id='answer-id-64602' class='answer answer-8 js-answer-label answerof-16672' value='64602' \/>&nbsp;<label for='answer-id-64602' id='answer-label-64602' class='js-answer-label answer label-8'><span class='answer'>The compliance function should report to the business (even when following a three lines of defense model).<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64603' \/><div class='watu-question-choice'><input type='radio' name='answer-16672[]' id='answer-id-64603' class='answer answer-8 php-answer-label answerof-16672' value='64603' \/>&nbsp;<label for='answer-id-64603' id='answer-label-64603' class='php-answer-label answer label-8'><span class='answer'>The compliance function should be independent of the business (following a three lines of defense model).<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64604' \/><div class='watu-question-choice'><input type='radio' name='answer-16672[]' id='answer-id-64604' class='answer answer-8 js-answer-label answerof-16672' value='64604' \/>&nbsp;<label for='answer-id-64604' id='answer-label-64604' class='js-answer-label answer label-8'><span class='answer'>The compliance function should be outsourced if there is a risk function.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64605' \/><div class='watu-question-choice'><input type='radio' name='answer-16672[]' id='answer-id-64605' class='answer answer-8 js-answer-label answerof-16672' value='64605' \/>&nbsp;<label for='answer-id-64605' id='answer-label-64605' class='js-answer-label answer label-8'><span class='answer'>The risk function should be outsourced if there is a compliance function.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Step 1: Compliance Function and the Three Lines of Defense Model<br\/>The Three Lines of Defense (3LoD) model ensures that risk management responsibilities are properly segregated:<br\/>First Line: Business units (own and manage risk).<br\/>Second Line: Compliance and risk management (independent oversight).<br\/>Third Line: Internal audit (provides assurance).<br\/>Step 2: Why Compliance Must Be Independent<br\/>PRMIA and Basel Compliance Principles state that compliance should not report to business units, as this creates a conflict of interest.<br\/>Compliance must be independent to ensure objective oversight of regulatory adherence.<br\/>Step 3: Why the Other Options Are Incorrect<br\/>Option A (&#8220;Report to the business&#8221;) \u2192 Incorrect because compliance must provide independent oversight, not report to business units.<br\/>Option C (&#8220;Outsource compliance if risk function exists&#8221;) \u2192 Incorrect because compliance and risk functions have distinct roles.<br\/>Option D (&#8220;Outsource risk if compliance exists&#8221;) \u2192 Incorrect because risk management is a core function, not an outsourcing candidate.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA Compliance Risk Governance &#8211; States compliance must be independent under the Three Lines of Defense model.<br\/>Basel Compliance Principles &#8211; Recommends separate reporting structures for compliance and business units.<br\/>Final Conclusion:<br\/>Compliance must be independent from the business to avoid conflicts of interest, making Option B the correct answer.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(8,this)' id='btn-8' value='See Answer'  \/><input type='hidden' id='questionType8' value='radio' class=''><\/div><div class='watu-question' id='question-9'><div class='question-content'><p><strong>QUESTION 18<\/strong><br \/>For the National Australia Bank &#8211; FX Options case study, which was the major cause of the loss event?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16673' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64606' \/><div class='watu-question-choice'><input type='radio' name='answer-16673[]' id='answer-id-64606' class='answer answer-9 js-answer-label answerof-16673' value='64606' \/>&nbsp;<label for='answer-id-64606' id='answer-label-64606' class='js-answer-label answer label-9'><span class='answer'>Currency traders were allowed access to the risk system by the CEO.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64607' \/><div class='watu-question-choice'><input type='radio' name='answer-16673[]' id='answer-id-64607' class='answer answer-9 js-answer-label answerof-16673' value='64607' \/>&nbsp;<label for='answer-id-64607' id='answer-label-64607' class='js-answer-label answer label-9'><span class='answer'>Currency traders concealed losses using back office knowledge.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64608' \/><div class='watu-question-choice'><input type='radio' name='answer-16673[]' id='answer-id-64608' class='answer answer-9 php-answer-label answerof-16673' value='64608' \/>&nbsp;<label for='answer-id-64608' id='answer-label-64608' class='php-answer-label answer label-9'><span class='answer'>Currency traders smoothed profits and concealed losses.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64609' \/><div class='watu-question-choice'><input type='radio' name='answer-16673[]' id='answer-id-64609' class='answer answer-9 js-answer-label answerof-16673' value='64609' \/>&nbsp;<label for='answer-id-64609' id='answer-label-64609' class='js-answer-label answer label-9'><span class='answer'>Currency traders were able to complete a Management Buy Out (MBO).<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Overview of the National Australia Bank (NAB) FX Options Case Study<br\/>Traders at National Australia Bank (NAB) engaged in unauthorized foreign exchange (FX) options trading.<br\/>They smoothed profits and concealed losses using fictitious transactions and manipulated reporting.<br\/>This led to a major financial scandal and loss of investor confidence.<br\/>Key Findings of the Investigation<br\/>Traders artificially smoothed profits to avoid drawing attention to large fluctuations.<br\/>Losses were concealed from internal risk controls by manipulating trade records.<br\/>The bank&#8217;s risk management and governance controls failed to detect and prevent these activities.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Currency traders were allowed access to the risk system by the CEO.<br\/>Incorrect &#8211; No evidence suggests CEO involvement in granting system access.<br\/>B . Currency traders concealed losses using back-office knowledge.<br\/>Incorrect &#8211; While they concealed losses, they also smoothed profits to manipulate earnings trends.<br\/>D . Currency traders were able to complete a Management Buy Out (MBO).<br\/>Incorrect &#8211; This event was not related to a Management Buyout (MBO); it was a trading scandal.<br\/>PRMIA Reference for Verification<br\/>PRMIA Fraud and Risk Management Case Studies<br\/>Basel Principles on Market Risk and Internal Control Failures<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(9,this)' id='btn-9' value='See Answer'  \/><input type='hidden' id='questionType9' value='radio' class=''><\/div><div class='watu-question' id='question-10'><div class='question-content'><p><strong>QUESTION 19<\/strong><br \/>Stafford Beers Viable System Model (VSM) has several implementation elements. Which of the following is not one of these?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16674' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64610' \/><div class='watu-question-choice'><input type='radio' name='answer-16674[]' id='answer-id-64610' class='answer answer-10 js-answer-label answerof-16674' value='64610' \/>&nbsp;<label for='answer-id-64610' id='answer-label-64610' class='js-answer-label answer label-10'><span class='answer'>Governance<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64611' \/><div class='watu-question-choice'><input type='radio' name='answer-16674[]' id='answer-id-64611' class='answer answer-10 php-answer-label answerof-16674' value='64611' \/>&nbsp;<label for='answer-id-64611' id='answer-label-64611' class='php-answer-label answer label-10'><span class='answer'>Input<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64612' \/><div class='watu-question-choice'><input type='radio' name='answer-16674[]' id='answer-id-64612' class='answer answer-10 js-answer-label answerof-16674' value='64612' \/>&nbsp;<label for='answer-id-64612' id='answer-label-64612' class='js-answer-label answer label-10'><span class='answer'>Process<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64613' \/><div class='watu-question-choice'><input type='radio' name='answer-16674[]' id='answer-id-64613' class='answer answer-10 js-answer-label answerof-16674' value='64613' \/>&nbsp;<label for='answer-id-64613' id='answer-label-64613' class='js-answer-label answer label-10'><span class='answer'>Output<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Stafford Beer&#8217;s Viable System Model (VSM)<br\/>VSM is a cybernetic model designed to analyze and improve organizational structures.<br\/>It consists of five core subsystems that define governance and operations.<br\/>Why Answer B is Correct<br\/>The VSM does not explicitly include &#8220;Input&#8221; as a key component.<br\/>The key elements of VSM include Governance, Process, and Output, but it does not define &#8220;Input&#8221; as a standalone concept.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Governance<br\/>Correct &#8211; Governance is part of VSM and deals with decision-making and oversight.<br\/>C . Process<br\/>Correct &#8211; Process represents the operational functions within VSM.<br\/>D . Output<br\/>Correct &#8211; Output refers to the results of the system&#8217;s operations.<br\/>PRMIA Reference for Verification<br\/>PRMIA Governance and Cybernetic Systems Guidelines<br\/>Stafford Beer&#8217;s Viable System Model Framework<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(10,this)' id='btn-10' value='See Answer'  \/><input type='hidden' id='questionType10' value='radio' class=''><\/div><div class='watu-question' id='question-11'><div class='question-content'><p><strong>QUESTION 20<\/strong><br \/>Which of the follow does the risk function typically have responsibility for?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16675' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64614' \/><div class='watu-question-choice'><input type='radio' name='answer-16675[]' id='answer-id-64614' class='answer answer-11 js-answer-label answerof-16675' value='64614' \/>&nbsp;<label for='answer-id-64614' id='answer-label-64614' class='js-answer-label answer label-11'><span class='answer'>Documenting its activities, typically by operating and then recording the daily operation of controls.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64615' \/><div class='watu-question-choice'><input type='radio' name='answer-16675[]' id='answer-id-64615' class='answer answer-11 php-answer-label answerof-16675' value='64615' \/>&nbsp;<label for='answer-id-64615' id='answer-label-64615' class='php-answer-label answer label-11'><span class='answer'>Documenting its activities, typically by developing a Risk Management Manual and set of Risk Policies.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64616' \/><div class='watu-question-choice'><input type='radio' name='answer-16675[]' id='answer-id-64616' class='answer answer-11 js-answer-label answerof-16675' value='64616' \/>&nbsp;<label for='answer-id-64616' id='answer-label-64616' class='js-answer-label answer label-11'><span class='answer'>Putting in place the servers, firewalls and software to ensure cyber security.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64617' \/><div class='watu-question-choice'><input type='radio' name='answer-16675[]' id='answer-id-64617' class='answer answer-11 js-answer-label answerof-16675' value='64617' \/>&nbsp;<label for='answer-id-64617' id='answer-label-64617' class='js-answer-label answer label-11'><span class='answer'>Creating a trial balance, balance sheet statement and cash flow statement.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Role of the Risk Function<br\/>The risk function is responsible for documenting, monitoring, and overseeing risk policies and frameworks.<br\/>It ensures the organization maintains structured risk governance, reporting, and compliance.<br\/>Key Responsibilities<br\/>Developing Risk Management Manuals to define risk appetite, risk frameworks, and risk governance structures.<br\/>Creating Risk Policies that align with regulatory standards and internal controls.<br\/>Why Answer B is Correct<br\/>The risk function primarily develops, implements, and maintains risk management frameworks, which include formal manuals and policies.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Documenting its activities, typically by operating and then recording the daily operation of controls.<br\/>Incorrect &#8211; The first line of defense (business units) handles daily operational controls, not the risk function.<br\/>C . Putting in place the servers, firewalls, and software to ensure cybersecurity.<br\/>Incorrect &#8211; Cybersecurity is an IT responsibility, while the risk function oversees cyber risk frameworks.<br\/>D . Creating a trial balance, balance sheet statement, and cash flow statement.<br\/>Incorrect &#8211; These are financial accounting responsibilities, not risk management duties.<br\/>PRMIA Reference for Verification<br\/>PRMIA Governance Framework for Risk Management<br\/>Basel Risk Management Principles<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(11,this)' id='btn-11' value='See Answer'  \/><input type='hidden' id='questionType11' value='radio' class=''><\/div><div class='watu-question' id='question-12'><div class='question-content'><p><strong>QUESTION 21<\/strong><br \/>Which of the following principles is critical when creating the optimum policy range and content&#8217;?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16676' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64618' \/><div class='watu-question-choice'><input type='radio' name='answer-16676[]' id='answer-id-64618' class='answer answer-12 js-answer-label answerof-16676' value='64618' \/>&nbsp;<label for='answer-id-64618' id='answer-label-64618' class='js-answer-label answer label-12'><span class='answer'>Policies should be divided into a large number of short topics to enhance accessibility.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64619' \/><div class='watu-question-choice'><input type='radio' name='answer-16676[]' id='answer-id-64619' class='answer answer-12 js-answer-label answerof-16676' value='64619' \/>&nbsp;<label for='answer-id-64619' id='answer-label-64619' class='js-answer-label answer label-12'><span class='answer'>Policy owners must ensure that policies are read by the regulator and then the shareholders.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64620' \/><div class='watu-question-choice'><input type='radio' name='answer-16676[]' id='answer-id-64620' class='answer answer-12 js-answer-label answerof-16676' value='64620' \/>&nbsp;<label for='answer-id-64620' id='answer-label-64620' class='js-answer-label answer label-12'><span class='answer'>Hard copies of a new policy should be placed in a central library of governance documents at the CRO&#8217;s home.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64621' \/><div class='watu-question-choice'><input type='radio' name='answer-16676[]' id='answer-id-64621' class='answer answer-12 php-answer-label answerof-16676' value='64621' \/>&nbsp;<label for='answer-id-64621' id='answer-label-64621' class='php-answer-label answer label-12'><span class='answer'>New policies should be accompanied by Citable training for the target audience and added to the content of new employee training.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Best Practices for Policy Development<br\/>Policies should be clearly written, well-structured, and accompanied by training to ensure employees understand their responsibilities.<br\/>PRMIA governance principles emphasize the need for training to enhance compliance and operational effectiveness.<br\/>Why Answer D is Correct<br\/>Training ensures policy adoption and understanding across the organization.<br\/>Integrating policies into new employee training helps embed governance and compliance culture.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Policies should be divided into a large number of short topics to enhance accessibility.<br\/>Incorrect &#8211; While policies should be structured for readability, excessive fragmentation can lead to confusion and inefficiency.<br\/>B . Policy owners must ensure that policies are read by the regulator and then the shareholders.<br\/>Incorrect &#8211; Policies are internal governance tools, not primarily for regulators or shareholders.<br\/>C . Hard copies of a new policy should be placed in a central library of governance documents at the CRO&#8217;s home.<br\/>Incorrect &#8211; Policies should be centrally available within the organization, not at a personal location.<br\/>PRMIA Reference for Verification<br\/>PRMIA Governance Best Practices<br\/>ISO 31000 Risk Management Standards<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(12,this)' id='btn-12' value='See Answer'  \/><input type='hidden' id='questionType12' value='radio' class=''><\/div><div class='watu-question' id='question-13'><div class='question-content'><p><strong>QUESTION 22<\/strong><br \/>For the Barings case study, what external event may have accelerated the discovery of the loss event?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16677' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64622' \/><div class='watu-question-choice'><input type='radio' name='answer-16677[]' id='answer-id-64622' class='answer answer-13 js-answer-label answerof-16677' value='64622' \/>&nbsp;<label for='answer-id-64622' id='answer-label-64622' class='js-answer-label answer label-13'><span class='answer'>The collapse of Lehman Brothers into bankruptcy in 2002.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64623' \/><div class='watu-question-choice'><input type='radio' name='answer-16677[]' id='answer-id-64623' class='answer answer-13 js-answer-label answerof-16677' value='64623' \/>&nbsp;<label for='answer-id-64623' id='answer-label-64623' class='js-answer-label answer label-13'><span class='answer'>The Singapore earthquake of January 17th 1995.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64624' \/><div class='watu-question-choice'><input type='radio' name='answer-16677[]' id='answer-id-64624' class='answer answer-13 js-answer-label answerof-16677' value='64624' \/>&nbsp;<label for='answer-id-64624' id='answer-label-64624' class='js-answer-label answer label-13'><span class='answer'>The collapse of Lehman Brothers into bankruptcy m 2008.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64625' \/><div class='watu-question-choice'><input type='radio' name='answer-16677[]' id='answer-id-64625' class='answer answer-13 php-answer-label answerof-16677' value='64625' \/>&nbsp;<label for='answer-id-64625' id='answer-label-64625' class='php-answer-label answer label-13'><span class='answer'>The Kobe earthquake of January 17th 1995.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Background of the Barings Case Study<br\/>The Barings Bank collapse occurred due to unauthorized derivatives trading by Nick Leeson in Singapore.<br\/>Leeson concealed losses, and his trading positions became unmanageable.<br\/>How the Kobe Earthquake Affected Barings<br\/>On January 17, 1995, the Kobe earthquake caused extreme market volatility.<br\/>Leeson&#8217;s unauthorized trades were highly exposed to the Nikkei 225 index, and the earthquake triggered heavy losses.<br\/>The event accelerated the exposure of Leeson&#8217;s fraudulent activities, leading to Barings&#8217; collapse.<br\/>Why Answer D is Correct<br\/>The Kobe earthquake created market turmoil, forcing Barings to confront its financial position, ultimately revealing the hidden losses.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . The collapse of Lehman Brothers into bankruptcy in 2002.<br\/>Incorrect &#8211; Lehman Brothers collapsed in 2008, not 2002.<br\/>B . The Singapore earthquake of January 17th, 1995.<br\/>Incorrect &#8211; No significant earthquake occurred in Singapore on that date.<br\/>C . The collapse of Lehman Brothers into bankruptcy in 2008.<br\/>Incorrect &#8211; Barings collapsed in 1995, not related to Lehman Brothers&#8217; 2008 failure.<br\/>PRMIA Reference for Verification<br\/>PRMIA Case Study on Barings Bank Collapse<br\/>Basel Committee Principles on Risk Oversight and Fraud Prevention<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(13,this)' id='btn-13' value='See Answer'  \/><input type='hidden' id='questionType13' value='radio' class=''><\/div><div class='watu-question' id='question-14'><div class='question-content'><p><strong>QUESTION 23<\/strong><br \/>The DORA act&#8217;s full name is which of the following?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16678' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64626' \/><div class='watu-question-choice'><input type='radio' name='answer-16678[]' id='answer-id-64626' class='answer answer-14 js-answer-label answerof-16678' value='64626' \/>&nbsp;<label for='answer-id-64626' id='answer-label-64626' class='js-answer-label answer label-14'><span class='answer'>Domain for Operational Risk Act.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64627' \/><div class='watu-question-choice'><input type='radio' name='answer-16678[]' id='answer-id-64627' class='answer answer-14 js-answer-label answerof-16678' value='64627' \/>&nbsp;<label for='answer-id-64627' id='answer-label-64627' class='js-answer-label answer label-14'><span class='answer'>Digital Operational Risk Act.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64628' \/><div class='watu-question-choice'><input type='radio' name='answer-16678[]' id='answer-id-64628' class='answer answer-14 js-answer-label answerof-16678' value='64628' \/>&nbsp;<label for='answer-id-64628' id='answer-label-64628' class='js-answer-label answer label-14'><span class='answer'>Daily Operational Resilience Act.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64629' \/><div class='watu-question-choice'><input type='radio' name='answer-16678[]' id='answer-id-64629' class='answer answer-14 php-answer-label answerof-16678' value='64629' \/>&nbsp;<label for='answer-id-64629' id='answer-label-64629' class='php-answer-label answer label-14'><span class='answer'>Digital Operational Resilience Act.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Definition of DORA<br\/>The Digital Operational Resilience Act (DORA) is a regulation by the European Union (EU) aimed at strengthening the digital resilience of financial institutions.<br\/>It establishes a regulatory framework for managing information and communication technology (ICT) risks in the financial sector.<br\/>Key Objectives of DORA<br\/>Ensures that financial institutions can withstand, respond to, and recover from cyber threats and ICT-related disruptions.<br\/>Introduces standards for risk management, incident reporting, and third-party ICT risk oversight.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Domain for Operational Risk Act.<br\/>Incorrect &#8211; No such regulation exists under this name.<br\/>B . Digital Operational Risk Act.<br\/>Incorrect &#8211; The official name is Digital Operational Resilience Act (DORA).<br\/>C . Daily Operational Resilience Act.<br\/>Incorrect &#8211; DORA is not focused on daily operations but rather long-term digital resilience.<br\/>PRMIA Reference for Verification<br\/>PRMIA Risk Governance &amp; Digital Resilience Standards<br\/>European Commission&#8217;s Official DORA Regulation<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(14,this)' id='btn-14' value='See Answer'  \/><input type='hidden' id='questionType14' value='radio' class=''><\/div><div class='watu-question' id='question-15'><div class='question-content'><p><strong>QUESTION 24<\/strong><br \/>What are the roles of business versus risk management in developing and implementing risk assessments?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16679' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64630' \/><div class='watu-question-choice'><input type='radio' name='answer-16679[]' id='answer-id-64630' class='answer answer-15 js-answer-label answerof-16679' value='64630' \/>&nbsp;<label for='answer-id-64630' id='answer-label-64630' class='js-answer-label answer label-15'><span class='answer'>Risk management, in its role as second line of defense, performs the risk assessment process from beginning to end. There is no business line involvement.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64631' \/><div class='watu-question-choice'><input type='radio' name='answer-16679[]' id='answer-id-64631' class='answer answer-15 php-answer-label answerof-16679' value='64631' \/>&nbsp;<label for='answer-id-64631' id='answer-label-64631' class='php-answer-label answer label-15'><span class='answer'>The business owns the risk assessment process, while risk management develops the framework, helps facilitate the process, and provides supervision and oversight.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64632' \/><div class='watu-question-choice'><input type='radio' name='answer-16679[]' id='answer-id-64632' class='answer answer-15 js-answer-label answerof-16679' value='64632' \/>&nbsp;<label for='answer-id-64632' id='answer-label-64632' class='js-answer-label answer label-15'><span class='answer'>Business owns the risk assessment process so risk management does not play a role in the process.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64633' \/><div class='watu-question-choice'><input type='radio' name='answer-16679[]' id='answer-id-64633' class='answer answer-15 js-answer-label answerof-16679' value='64633' \/>&nbsp;<label for='answer-id-64633' id='answer-label-64633' class='js-answer-label answer label-15'><span class='answer'>Business management&#8217;s role in the risk assessment process should be confined to oversight.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>The Principles for Risk Governance, as established by PRMIA (Professional Risk Managers&#8217; International Association), emphasize the Three Lines of Defense (3LoD) Model, which is widely used in risk management and governance frameworks.<br\/>Business Line Ownership of Risk (First Line of Defense)<br\/>The business units are responsible for identifying, assessing, managing, and monitoring risks within their operations.<br\/>Since they generate the risks through their activities, they must own the risk assessment process.<br\/>This aligns with PRMIA Governance Principles, which state that risk management should be embedded within business operations to ensure proactive risk identification and control.<br\/>Risk Management&#8217;s Role (Second Line of Defense)<br\/>The risk management function is not directly responsible for conducting risk assessments but plays a key role in designing and maintaining the risk assessment framework.<br\/>This includes setting standards, methodologies, and tools for assessing risks across business functions.<br\/>Risk management provides supervision and oversight, ensuring that risk assessments align with organizational policies and regulatory expectations.<br\/>Oversight from Senior Management &amp; the Board (Third Line of Defense)<br\/>Internal audit (third line of defense) independently reviews and provides assurance that the risk management framework is effective and that risk assessments are conducted properly.<br\/>PRMIA&#8217;s Risk Governance Standards emphasize that internal audit should evaluate the effectiveness of the risk assessment framework without being involved in its direct execution.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Risk management, in its role as second line of defense, performs the risk assessment process from beginning to end. There is no business line involvement.<br\/>Incorrect &#8211; Risk management facilitates and oversees the risk assessment process, but the business must take ownership of the risks it generates.<br\/>C . Business owns the risk assessment process so risk management does not play a role in the process.<br\/>Incorrect &#8211; While the business owns the process, risk management plays a crucial role in developing the framework, setting policies, and providing oversight.<br\/>D . Business management&#8217;s role in the risk assessment process should be confined to oversight.<br\/>Incorrect &#8211; Business management is actively responsible for executing risk assessments, not just overseeing them.<br\/>PRMIA Reference for Verification<br\/>PRMIA Standards for Risk Governance &#8211; Establishes the Three Lines of Defense and the separation of responsibilities.<br\/>PRMIA Risk Management Framework (RMF) Guidelines &#8211; Defines the roles of business and risk management in risk assessment.<br\/>PRMIA Enterprise Risk Management Best Practices &#8211; Outlines how risk management facilitates risk assessments while the business retains ownership.<br\/>This answer is verified according to PRMIA&#8217;s official risk governance documents and best practices. Would you like additional clarification or supporting documentation references?<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(15,this)' id='btn-15' value='See Answer'  \/><input type='hidden' id='questionType15' value='radio' class=''><\/div><div class='watu-question' id='question-16'><div class='question-content'><p><strong>QUESTION 25<\/strong><br \/>What are the objectives of conducting an internal loss investigation?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16680' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64634' \/><div class='watu-question-choice'><input type='radio' name='answer-16680[]' id='answer-id-64634' class='answer answer-16 php-answer-label answerof-16680' value='64634' \/>&nbsp;<label for='answer-id-64634' id='answer-label-64634' class='php-answer-label answer label-16'><span class='answer'>Increase understanding of root causes, focus attention on remediation, and improve the quality of scenario analysis and risk assessments.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64635' \/><div class='watu-question-choice'><input type='radio' name='answer-16680[]' id='answer-id-64635' class='answer answer-16 js-answer-label answerof-16680' value='64635' \/>&nbsp;<label for='answer-id-64635' id='answer-label-64635' class='js-answer-label answer label-16'><span class='answer'>Increase understanding of root causes, focus attention on who caused the issue, and improve the quality of scenario analysis and risk assessments.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64636' \/><div class='watu-question-choice'><input type='radio' name='answer-16680[]' id='answer-id-64636' class='answer answer-16 js-answer-label answerof-16680' value='64636' \/>&nbsp;<label for='answer-id-64636' id='answer-label-64636' class='js-answer-label answer label-16'><span class='answer'>Increase understanding of root causes, focus attention on remediation, and ascertain responsibility for the loss event.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64637' \/><div class='watu-question-choice'><input type='radio' name='answer-16680[]' id='answer-id-64637' class='answer answer-16 js-answer-label answerof-16680' value='64637' \/>&nbsp;<label for='answer-id-64637' id='answer-label-64637' class='js-answer-label answer label-16'><span class='answer'>This is determined on a case by case basis by the HR team.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>tep 1: Purpose of Internal Loss Investigations<br\/>Internal loss investigations analyze past loss events to identify root causes, improve controls, and enhance risk assessments.<br\/>Step 2: Why Option A Is Correct<br\/>Root Cause Analysis: Identifying why the loss occurred.<br\/>Focus on Remediation: Implementing corrective measures to prevent recurrence.<br\/>Scenario Analysis Improvement: Using lessons learned to enhance risk scenario modeling.<br\/>Step 3: Why the Other Options Are Incorrect<br\/>Option B (&#8220;Focus on who caused the issue&#8221;) \u2192 Incorrect because loss investigations are about systemic issues, not assigning blame.<br\/>Option C (&#8220;Ascertain responsibility for the loss event&#8221;) \u2192 Incorrect because the focus is on process improvements, not individual accountability.<br\/>Option D (&#8220;Determined by HR on a case-by-case basis&#8221;) \u2192 Incorrect because HR does not dictate risk investigations-risk and compliance functions do.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA Operational Risk Framework &#8211; Emphasizes loss investigations for systemic risk management.<br\/>Basel III Risk Governance Standards &#8211; Defines loss event analysis as a key risk management tool.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(16,this)' id='btn-16' value='See Answer'  \/><input type='hidden' id='questionType16' value='radio' class=''><\/div><div class='watu-question' id='question-17'><div class='question-content'><p><strong>QUESTION 26<\/strong><br \/>Governance can be defined as which of the following?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16681' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64638' \/><div class='watu-question-choice'><input type='radio' name='answer-16681[]' id='answer-id-64638' class='answer answer-17 js-answer-label answerof-16681' value='64638' \/>&nbsp;<label for='answer-id-64638' id='answer-label-64638' class='js-answer-label answer label-17'><span class='answer'>Governance is a structure specifying the daily operation of a firm.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64639' \/><div class='watu-question-choice'><input type='radio' name='answer-16681[]' id='answer-id-64639' class='answer answer-17 js-answer-label answerof-16681' value='64639' \/>&nbsp;<label for='answer-id-64639' id='answer-label-64639' class='js-answer-label answer label-17'><span class='answer'>Governance is a structure specifying the ways in which reporting is made to the primary regulator.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64640' \/><div class='watu-question-choice'><input type='radio' name='answer-16681[]' id='answer-id-64640' class='answer answer-17 js-answer-label answerof-16681' value='64640' \/>&nbsp;<label for='answer-id-64640' id='answer-label-64640' class='js-answer-label answer label-17'><span class='answer'>Governance is being replaced by management in all firms that are regulated.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64641' \/><div class='watu-question-choice'><input type='radio' name='answer-16681[]' id='answer-id-64641' class='answer answer-17 php-answer-label answerof-16681' value='64641' \/>&nbsp;<label for='answer-id-64641' id='answer-label-64641' class='php-answer-label answer label-17'><span class='answer'>Governance is a structure specifying the policies, principles, and procedures for making decisions about corporate direction.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Definition of Governance<br\/>Governance refers to the framework of policies, principles, and processes used to guide corporate decision-making and strategic direction.<br\/>It ensures accountability, transparency, and risk oversight within an organization.<br\/>Key Elements of Governance<br\/>Risk oversight &#8211; Ensuring risks are properly identified and managed.<br\/>Accountability structures &#8211; Defining roles and responsibilities.<br\/>Decision-making frameworks &#8211; Establishing policies for long-term corporate success.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Governance is a structure specifying the daily operation of a firm.<br\/>Incorrect &#8211; Governance focuses on high-level corporate oversight, not day-to-day operations.<br\/>B . Governance is a structure specifying the ways in which reporting is made to the primary regulator.<br\/>Incorrect &#8211; Governance is broader than just regulatory reporting.<br\/>C . Governance is being replaced by management in all firms that are regulated.<br\/>Incorrect &#8211; Governance and management are separate but complementary; governance provides oversight, while management executes strategy.<br\/>PRMIA Reference for Verification<br\/>PRMIA 10 Principles of Good Governance<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(17,this)' id='btn-17' value='See Answer'  \/><input type='hidden' id='questionType17' value='radio' class=''><\/div><div class='watu-question' id='question-18'><div class='question-content'><p><strong>QUESTION 27<\/strong><br \/>ISO 27000 relates to what topic \/ area?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16682' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64642' \/><div class='watu-question-choice'><input type='radio' name='answer-16682[]' id='answer-id-64642' class='answer answer-18 js-answer-label answerof-16682' value='64642' \/>&nbsp;<label for='answer-id-64642' id='answer-label-64642' class='js-answer-label answer label-18'><span class='answer'>Environmental, social, and governance (ESG) investing.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64643' \/><div class='watu-question-choice'><input type='radio' name='answer-16682[]' id='answer-id-64643' class='answer answer-18 php-answer-label answerof-16682' value='64643' \/>&nbsp;<label for='answer-id-64643' id='answer-label-64643' class='php-answer-label answer label-18'><span class='answer'>Information Security Systems.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64644' \/><div class='watu-question-choice'><input type='radio' name='answer-16682[]' id='answer-id-64644' class='answer answer-18 js-answer-label answerof-16682' value='64644' \/>&nbsp;<label for='answer-id-64644' id='answer-label-64644' class='js-answer-label answer label-18'><span class='answer'>International Risk Management.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64645' \/><div class='watu-question-choice'><input type='radio' name='answer-16682[]' id='answer-id-64645' class='answer answer-18 js-answer-label answerof-16682' value='64645' \/>&nbsp;<label for='answer-id-64645' id='answer-label-64645' class='js-answer-label answer label-18'><span class='answer'>Auditing of financial controls.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Step 1: Definition of ISO 27000<br\/>ISO 27000 is a global standard for information security management systems (ISMS), issued by the International Organization for Standardization (ISO).<br\/>It provides a framework for protecting sensitive information through policies, controls, and risk management practices.<br\/>Step 2: Why Option B Is Correct<br\/>ISO 27001 (part of ISO 27000 series) is one of the most widely recognized certifications for information security governance.<br\/>It sets guidelines on risk assessment, incident response, and data protection.<br\/>Step 3: Why the Other Options Are Incorrect<br\/>Option A (&#8220;ESG investing&#8221;)<br\/>Incorrect because ISO 27000 deals with cybersecurity, not environmental, social, and governance (ESG) issues.<br\/>Option C (&#8220;International Risk Management&#8221;)<br\/>Incorrect because ISO 27000 focuses on information security, not general risk management.<br\/>Option D (&#8220;Auditing of financial controls&#8221;)<br\/>Incorrect because financial auditing standards (e.g., SOX, COSO) are separate from information security standards.<br\/>PRMIA Risk Reference Used:<br\/>ISO 27000 Series Documentation &#8211; Defines cybersecurity risk management practices.<br\/>PRMIA IT Risk Governance Framework &#8211; Reference ISO 27001 as a cybersecurity standard.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(18,this)' id='btn-18' value='See Answer'  \/><input type='hidden' id='questionType18' value='radio' class=''><\/div><div class='watu-question' id='question-19'><div class='question-content'><p><strong>QUESTION 28<\/strong><br \/>Under the previous Basel II approach, which was not an approach for operational risk?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16683' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64646' \/><div class='watu-question-choice'><input type='radio' name='answer-16683[]' id='answer-id-64646' class='answer answer-19 js-answer-label answerof-16683' value='64646' \/>&nbsp;<label for='answer-id-64646' id='answer-label-64646' class='js-answer-label answer label-19'><span class='answer'>Basic Indicator Approach (BIA).<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64647' \/><div class='watu-question-choice'><input type='radio' name='answer-16683[]' id='answer-id-64647' class='answer answer-19 js-answer-label answerof-16683' value='64647' \/>&nbsp;<label for='answer-id-64647' id='answer-label-64647' class='js-answer-label answer label-19'><span class='answer'>The Standardized Approach (TSA).<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64648' \/><div class='watu-question-choice'><input type='radio' name='answer-16683[]' id='answer-id-64648' class='answer answer-19 js-answer-label answerof-16683' value='64648' \/>&nbsp;<label for='answer-id-64648' id='answer-label-64648' class='js-answer-label answer label-19'><span class='answer'>Advanced Measurement Approach (AMA).<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64649' \/><div class='watu-question-choice'><input type='radio' name='answer-16683[]' id='answer-id-64649' class='answer answer-19 php-answer-label answerof-16683' value='64649' \/>&nbsp;<label for='answer-id-64649' id='answer-label-64649' class='php-answer-label answer label-19'><span class='answer'>Alternative Measurement Approach (AMA).<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Overview of Basel II Approaches for Operational Risk<br\/>Basel II introduced three main approaches to calculating capital requirements for operational risk:<br\/>Basic Indicator Approach (BIA)<br\/>The Standardized Approach (TSA)<br\/>Advanced Measurement Approach (AMA)<br\/>Why Answer D is Correct<br\/>Alternative Measurement Approach (AMA) is not a recognized Basel II approach.<br\/>The correct term under Basel II was Advanced Measurement Approach (AMA).<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Basic Indicator Approach (BIA).<br\/>Correct &#8211; A simple approach where capital is set as a fixed percentage of gross income.<br\/>B . The Standardized Approach (TSA).<br\/>Correct &#8211; Categorizes operational risk into business lines, each with assigned risk factors.<br\/>C . Advanced Measurement Approach (AMA).<br\/>Correct &#8211; Uses internal models to calculate capital requirements based on loss data, scenario analysis, and risk controls.<br\/>PRMIA Reference for Verification<br\/>Basel II Framework for Operational Risk (2004)<br\/>PRMIA Risk Management Guidelines<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(19,this)' id='btn-19' value='See Answer'  \/><input type='hidden' id='questionType19' value='radio' class=''><\/div><div class='watu-question' id='question-20'><div class='question-content'><p><strong>QUESTION 29<\/strong><br \/>Two of the four key resources that are regarded as critical to maintain confidence and calibrate Risk Appetite to are?<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16684' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64650' \/><div class='watu-question-choice'><input type='radio' name='answer-16684[]' id='answer-id-64650' class='answer answer-20 js-answer-label answerof-16684' value='64650' \/>&nbsp;<label for='answer-id-64650' id='answer-label-64650' class='js-answer-label answer label-20'><span class='answer'>Capital expenditure and liquidity.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64651' \/><div class='watu-question-choice'><input type='radio' name='answer-16684[]' id='answer-id-64651' class='answer answer-20 php-answer-label answerof-16684' value='64651' \/>&nbsp;<label for='answer-id-64651' id='answer-label-64651' class='php-answer-label answer label-20'><span class='answer'>Net earnings and capital.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64652' \/><div class='watu-question-choice'><input type='radio' name='answer-16684[]' id='answer-id-64652' class='answer answer-20 js-answer-label answerof-16684' value='64652' \/>&nbsp;<label for='answer-id-64652' id='answer-label-64652' class='js-answer-label answer label-20'><span class='answer'>Strong regulatory assessment and net earnings.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64653' \/><div class='watu-question-choice'><input type='radio' name='answer-16684[]' id='answer-id-64653' class='answer answer-20 js-answer-label answerof-16684' value='64653' \/>&nbsp;<label for='answer-id-64653' id='answer-label-64653' class='js-answer-label answer label-20'><span class='answer'>Quality human resources and reputation.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Key Resources for Calibrating Risk Appetite<br\/>Risk appetite defines how much risk an organization is willing to accept to achieve its objectives.<br\/>Two of the most critical resources for maintaining confidence and setting risk appetite are net earnings and capital.<br\/>Why Net Earnings and Capital are Critical<br\/>Net earnings reflect profitability and financial stability, influencing risk-taking capacity.<br\/>Capital ensures that the institution can absorb losses and meet regulatory requirements.<br\/>Basel III emphasizes capital adequacy as a core measure of financial resilience.<br\/>Why Answer B is Correct<br\/>Net earnings support operational stability, while capital determines how much risk an institution can bear.<br\/>Both are used to define and calibrate risk appetite levels.<br\/>Why Other Answers Are Incorrect<br\/>Option<br\/>Explanation:<br\/>A . Capital expenditure and liquidity.<br\/>Incorrect &#8211; Capital expenditure is an investment measure, not a direct risk appetite determinant.<br\/>C . Strong regulatory assessment and net earnings.<br\/>Incorrect &#8211; Regulatory assessments are important but do not directly set risk appetite.<br\/>D . Quality human resources and reputation.<br\/>Incorrect &#8211; HR and reputation are important for governance but do not directly influence risk capital and earnings stability.<br\/>PRMIA Reference for Verification<br\/>PRMIA Risk Appetite Framework<br\/>Basel III Capital and Earnings Management Guidelines<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(20,this)' id='btn-20' value='See Answer'  \/><input type='hidden' id='questionType20' value='radio' class=''><\/div><div class='watu-question' id='question-21'><div class='question-content'><p><strong>QUESTION 30<\/strong><br \/>Team supervisors are key in the development and maintenance of the risk culture because they are:<\/p>\n<\/div><input type='hidden' name='question_id[]' value='16685' \/><div class='watu-questions-wrap '><input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64654' \/><div class='watu-question-choice'><input type='radio' name='answer-16685[]' id='answer-id-64654' class='answer answer-21 js-answer-label answerof-16685' value='64654' \/>&nbsp;<label for='answer-id-64654' id='answer-label-64654' class='js-answer-label answer label-21'><span class='answer'>More experienced than the employees that report to them.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64655' \/><div class='watu-question-choice'><input type='radio' name='answer-16685[]' id='answer-id-64655' class='answer answer-21 js-answer-label answerof-16685' value='64655' \/>&nbsp;<label for='answer-id-64655' id='answer-label-64655' class='js-answer-label answer label-21'><span class='answer'>Visible to regulators and can describe the firm&#8217;s risk culture to inspection teams.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64656' \/><div class='watu-question-choice'><input type='radio' name='answer-16685[]' id='answer-id-64656' class='answer answer-21 php-answer-label answerof-16685' value='64656' \/>&nbsp;<label for='answer-id-64656' id='answer-label-64656' class='php-answer-label answer label-21'><span class='answer'>Connected with every employee, every day, and can ensure desired behaviors are followed by all.<\/span><\/label><\/div>\n<input type='hidden' name='answer_ids[]' class='watu-answer-ids' value='64657' \/><div class='watu-question-choice'><input type='radio' name='answer-16685[]' id='answer-id-64657' class='answer answer-21 js-answer-label answerof-16685' value='64657' \/>&nbsp;<label for='answer-id-64657' id='answer-label-64657' class='js-answer-label answer label-21'><span class='answer'>Visible to regulators and can describe the firm&#8217;s risk culture to their board.<\/span><\/label><\/div>\n<\/div><div class='show-question-feedback' style='display:none;'>Team supervisors play a critical role in shaping and maintaining an organization&#8217;s risk culture. PRMIA&#8217;s Risk Governance Framework and Risk Culture Principles emphasize that supervisors act as the link between risk policies and frontline employees, ensuring that risk-aware behaviors are consistently followed.<br\/>Step 1: Role of Supervisors in Risk Culture Development<br\/>Supervisors engage with employees daily, providing guidance on risk-based decision-making.<br\/>They reinforce risk policies, standards, and expectations set by senior management.<br\/>Supervisors identify behavioral trends that may indicate risk culture weaknesses.<br\/>Step 2: Supervisors as Enforcers of Risk Culture<br\/>PRMIA&#8217;s Risk Culture Framework stresses that risk culture must be embedded into daily operations through supervisor-led enforcement.<br\/>Supervisors monitor, correct non-compliant behaviors, and provide ongoing risk awareness training.<br\/>Their proximity to employees allows them to detect early warning signs of risk issues.<br\/>Step 3: Why the Other Options Are Incorrect<br\/>Option A: &#8220;More experienced than the employees that report to them.&#8221;<br\/>Experience alone does not establish or maintain a risk culture.<br\/>A risk culture is about behaviors and practices, not just expertise.<br\/>Option B: &#8220;Visible to regulators and can describe the firm&#8217;s risk culture to inspection teams.&#8221; While supervisors may interact with regulators, their primary role is to engage with employees daily rather than acting as spokespersons.<br\/>Option D: &#8220;Visible to regulators and can describe the firm&#8217;s risk culture to their board.&#8221; Boards typically rely on Chief Risk Officers (CROs) or senior executives to communicate risk culture, not direct supervisors.<br\/>PRMIA Risk Reference Used:<br\/>PRMIA Risk Culture Framework &#8211; Highlights the role of supervisors in ensuring risk-aware behaviors.<br\/>PRMIA Risk Governance Framework &#8211; Stresses that frontline supervisors must enforce risk management policies.<br\/>PRMIA Risk Awareness Guidelines &#8211; Reinforces daily interaction as a key factor in maintaining a strong risk culture.<br\/>Final Conclusion:<br\/>Supervisors directly influence employees&#8217; behaviors and ensure that risk culture is consistently followed, making Option C the correct answer.<\/div><input type='button' class='showchecked' style='margin: 10px 0;' onclick='showanswer1(21,this)' id='btn-21' value='See Answer'  \/><input type='hidden' id='questionType21' value='radio' class=''><\/div><div style='display:none' id='question-22'><br \/><div class='question-content'><img decoding=\"async\" src=\"https:\/\/exam.real4prep.com\/wp-content\/plugins\/watu\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading ...\" title=\"Loading ...\" \/>&nbsp;Loading &#8230;<\/div><\/div><br \/>\n<input type=\"button\" name=\"action\" onclick=\"Watu.submitResult()\" id=\"action-button\" style=\"margin:0 auto 20px auto;\" value=\"View Results\"  class=\"watu-submit-button\" \/>\n<input type=\"hidden\" name=\"no_ajax\" value=\"0\"><input type=\"hidden\" name=\"quiz_id\" value=\"848\" \/>\n<input type=\"hidden\" id=\"watuStartTime\" name=\"start_time\" value=\"2026-09-23 12:01:22\" \/>\n<\/form>\n<\/div>\n<div id=\"watu-loading-result\" style=\"display:none;\">\n\t<p align=\"center\"><img decoding=\"async\" src=\"https:\/\/exam.real4prep.com\/wp-content\/plugins\/watu\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading\" title=\"Loading\" \/><\/p>\n<\/div>\t\n<script type=\"text\/javascript\">\nvar exam_id=0;\nvar question_ids='';\nvar watuURL='';\njQuery(function($){\nquestion_ids = \"16665,16666,16667,16668,16669,16670,16671,16672,16673,16674,16675,16676,16677,16678,16679,16680,16681,16682,16683,16684,16685\";\nexam_id = 848;\nWatu.exam_id = exam_id;\nWatu.qArr = question_ids.split(',');\nWatu.post_id = 2157;\nWatu.singlePage = '1';\nWatu.hAppID = \"0.95170600 1790164882\";\nwatuURL = \"https:\/\/exam.real4prep.com\/wp-admin\/admin-ajax.php\";\nWatu.noAlertUnanswered = 0;\n});\n\nfunction showanswer1(e,q) {\n\tvar check = new Array();\n\tjQuery('.answer-' + e).each(function (i) {\n\t\tcheck.push(this.checked)\n\t})\n\tlet textval = jQuery('.watu-textarea-' + e).val()\n\tif (jQuery.inArray(true, check) >= 0 || textval !== '' && textval !== undefined) {\n\t\tjQuery(q).stop().fadeOut(300)\n\t\tjQuery('.php-answer-label.label-' + e).addClass(\n\t\t\t'correct-answer'\n\t\t)\n\t\tjQuery('.answer-' + e).each(function (i) {\n\t\t\tif (this.checked && this.className.match(\/js\\-answer\/)) {\n\t\t\t\tvar number = this.id.toString().replace(\/\\D\/g, '')\n\t\t\t\tif (number) {\n\t\t\t\t\tjQuery('#answer-label-' + number).addClass('user-answer')\n\t\t\t\t}\n\t\t\t}\n\t\t})\n\t\tjQuery(q).siblings('.show-question-feedback').stop().fadeIn(300)\n\t\ttextval = ''\n\t} else if (textval == '' || textval == undefined){\n\t\t\/\/jQuery(\".hint\").stop().fadeIn(300)\n\t\talert('Please first answer the question');\n\t}\n}\nvar btnisshow = jQuery(\".php-answer-label\").length\nif (btnisshow > 0) {\n\tjQuery('.showchecked').show()\n} else {\n\tjQuery('.showchecked').hide()\n}\n<\/script>\n<p><strong>Focus on 8020 All-in-One Exam Guide For Quick Preparation: <a href=\"https:\/\/www.real4prep.com\/8020-exam.html\" target=\"_blank\">https:\/\/www.real4prep.com\/8020-exam.html<\/a><\/strong><\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>[2026] 8020 All-in-One Exam Guide Practice To your 8020 Exam! Preparations of 8020 Exam 2026 PRM Certification Unlimited 62 Questions PRMIA 8020 Exam Syllabus Topics: Topic Details&#8230; <\/p>\n","protected":false},"author":1,"featured_media":2158,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[5922,3087],"tags":[5916,5919,5920,5918,5917,5921],"class_list":["post-2157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-5922","category-prmia","tag-8020-exam-simulator-online","tag-8020-free-download","tag-8020-latest-exam-bootcamp","tag-8020-test-simulator-fee","tag-8020-valid-test-bootcamp-materials","tag-new-8020-test-vce-free"],"_links":{"self":[{"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/posts\/2157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/comments?post=2157"}],"version-history":[{"count":1,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/posts\/2157\/revisions"}],"predecessor-version":[{"id":2276,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/posts\/2157\/revisions\/2276"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/media\/2158"}],"wp:attachment":[{"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/media?parent=2157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/categories?post=2157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/exam.real4prep.com\/de\/wp-json\/wp\/v2\/tags?post=2157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}