A department has been granted an exception to bypass the existing approval process for purchase orders. The risk practitioner should verify the exception has been approved by which of the following?

Who is accountable for risk treatment?

Which of the following is the MOST effective way to mitigate identified risk scenarios?

Which of the following is the MOST important consideration when selecting key risk indicators (KRIs) to monitor risk trends over time?

When developing risk scenario using a list of generic scenarios based on industry best practices, it is MOST imported to: