C is corrent. Delaying is not a response to risk identified by COSO’s Enterprise Risk Management Framework. A is incorrect. Avoidance is a response to risk identified by COSO. B is incorrect. Reduction is a response to risk identified by COSO. D is incorrect. Sharing is a response to risk identified by COSO.
|