Câu 10: ORM: Operational Risk Management

Ideally, which of the following should be completed as part of the risk assessments of service providers?

1. A. An assessment of a third party should include its compliance and risk infrastructure, financials, business strategy and operating history. — đáp án hiện tại
2. B. An assessment of a third party should not include its compliance and risk infrastructure, financials, business strategy and operating history.
3. C. Onsite visits are not advantageous for understanding the third party’s risks and control environment.
4. D. A review of the pay levels of the staff supporting the service.