Explanation
A Cross Functional Team should create a risk register. It shouldn't be the responsibility of one person to do this- more points of view will lead to more risks being identified. Accountability for the Risk Register may however sit with the CEO or a Department Manager. This is explained on p. 132

Explanation
The correct answers are as follows:
Table Description automatically generated with low confidence

Explanation
Indemnity clauses should contain duties of both parties, a monetary limit and a time limit (1 2 and 5). It should also detail what types of costs are covered. These four points are explained on p.61. An indemnity clause doesn't necessarily signal a breach in contract, and levels of insurance are not relevant here.

Explanation
Separation of duties is a key component of the Sarbanes-Oxley Regulations. It ensures businesses are accounting responsibly, and one way to do this is through separation of duties (no one person has complete control of the accounts of a company). See https://www.investopedia.com/terms/s/sarbanesoxleyact.asp and p.42 in the study guide. This piece of legislation does tend to come up in the exam so do revise this topic.

Explanation
SWOT is used for this. S + W is strengths and weaknesses, which are internal risks. O+T are opportunities and threats which are external risks. See p. 12 for more information