First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Governance
Which document formally authorizes an internal audit function to operate and defines its reporting lines and scope?
- The annual financial budget
- The audit charter approved by the governing body Correct answer.
- The employee code of conduct
- The vendor procurement policy
Explanation
An audit charter is the formal instrument through which the governing body grants the internal audit function its mandate, independence, and scope of work. It establishes reporting lines and authority so auditors can act without management interference.
Question 2Governance
What does the 'three lines model' primarily clarify within an organization?
- How many years financial records must be retained
- How external auditors set their fee structure
- How many committee meetings are held annually
- How roles and responsibilities for risk management are divided and coordinated Correct answer.
Explanation
The three lines model separates management's ownership of risk, an independent risk and compliance oversight function, and independent internal audit assurance. This division reduces gaps and duplication in risk governance.
Question 3Governance
A board creates a risk committee but leaves final risk appetite approval with the full board. Which governance principle does this arrangement illustrate?
- Elimination of the need for management reporting
- Transfer of legal liability to the committee
- Outsourcing of risk ownership to external advisers
- Delegation of preparatory work while retaining ultimate accountability Correct answer.
Explanation
Committees may examine issues and prepare recommendations, but the full board remains accountable for key decisions such as risk appetite. Delegation supports efficiency without diluting ultimate responsibility.
Question 4Governance
Which characteristic best distinguishes an independent board director?
- Holding a large block of the company's shares
- Having previously served as the chief executive
- Receiving consulting fees from the company
- No material relationship with the company beyond the directorship Correct answer.
Explanation
Independence means the director has no relationship that could reasonably influence objective judgment, such as employment, material contracts, or advisory fees. Shareholding and prior executive roles are commonly treated as compromising factors.
Question 5Governance
An organization defines risk appetite as the amount of risk it is willing to accept in pursuit of objectives. Which statement best describes risk tolerance?
- The frequency of board risk reporting
- The total elimination of all identified risks
- The maximum possible loss from any single event
- The acceptable variation around the appetite for a specific risk category Correct answer.
Explanation
Risk appetite expresses the overall level of risk the entity will accept, while tolerance sets the acceptable deviation or limit for particular risks. Tolerance operationalizes appetite into measurable boundaries.
Question 6Governance
Under a typical governance framework, who owns the responsibility for identifying and managing risks in day-to-day operations?
- The board's audit committee
- The regulatory supervisor
- Line management within the business units Correct answer.
- The external audit firm
Explanation
Risk ownership sits with management, specifically the business line that creates and manages the exposure. Oversight bodies provide assurance and challenge but do not take over operational risk ownership.
Question 7Governance
A whistleblowing policy allows staff to report concerns anonymously to an independent channel. Which governance objective does this most directly support?
- Increasing the speed of financial closing
- Strengthening the control environment and early detection of misconduct Correct answer.
- Reducing the cost of external audit fees
- Improving the accuracy of sales forecasts
Explanation
Anonymous independent reporting channels encourage disclosure of wrongdoing and support a strong ethical control environment. They help the organization detect and address misconduct before it escalates.
Question 8Governance
Which body is typically responsible for appointing and overseeing the external auditor on behalf of shareholders?
- The audit committee of the board Correct answer.
- The treasury function
- The chief financial officer
- The internal audit department
Explanation
The audit committee usually recommends or approves the external auditor's appointment, remuneration, and oversight to preserve independence from management. This separation prevents management from controlling its own assurance provider.
Question 9Governance
A company's delegation-of-authority matrix shows that expenditures above a threshold require board approval. What governance purpose does this matrix serve?
- It sets the interest rate on bank borrowings
- It records the market value of fixed assets
- It lists the personal qualifications of each director
- It defines decision rights and approval limits across the organization Correct answer.
Explanation
A delegation-of-authority matrix assigns decision rights and spending limits to specified roles, preventing unauthorized commitments. It is a core control for ensuring accountability and segregation of duties.
Question 10Governance
Which of the following is the strongest indicator that a board is exercising effective challenge of management?
- Directors regularly question assumptions and request supporting evidence Correct answer.
- Directors receive board papers only at the start of each meeting
- Directors delegate all scrutiny to the chief executive
- Directors always approve management proposals without discussion
Explanation
Effective challenge requires directors to test assumptions, probe evidence, and debate proposals rather than rubber-stamp them. Constructive skepticism is a hallmark of good board governance.
Question 11Governance
What is the primary role of a board risk committee?
- Negotiating collective bargaining agreements
- Designing the company's marketing campaigns
- Preparing the company's daily cash reconciliations
- Overseeing the enterprise risk framework and advising the board on risk matters Correct answer.
Explanation
A risk committee provides focused oversight of the enterprise risk management framework and advises the full board. It does not perform operational tasks that belong to management.
Question 12Governance
An internal audit function reports administratively to the chief financial officer and functionally to the audit committee. Which statement best assesses this arrangement?
- It eliminates the need for an audit committee entirely
- Functional reporting to the committee preserves independence while administrative reporting supports daily coordination Correct answer.
- It transfers risk ownership from management to internal audit
- It fully compromises independence because any reporting to management is prohibited
Explanation
Dual reporting is common practice: functional reporting to the audit committee protects independence over audit scope and findings, while administrative reporting to management supports budgeting and personnel matters. The key safeguard is that the committee governs audit substance.
Question 13Governance
Which practice most strengthens the independence of an internal audit function?
- Internal audit staff are rotated into operational roles they will later audit
- The audit committee approves the audit plan and reviews the chief auditor's performance Correct answer.
- The chief financial officer sets the internal audit budget and scope
- Audit findings are edited by the audited department before release
Explanation
Independence is protected when the audit committee controls the audit plan, budget, and evaluation of the chief audit executive. This prevents management from limiting the scope of assurance work.
Question 14Governance
A regulator requires a firm to maintain a compliance function that is operationally independent from business lines. What is the main rationale for this requirement?
- To reduce the number of staff needed in front-office roles
- To increase the firm's market share in new products
- To allow the compliance team to approve its own trading limits
- To prevent commercial pressures from overriding regulatory obligations Correct answer.
Explanation
Independence lets compliance staff raise and enforce regulatory concerns without being overridden by revenue targets. Separation from business lines reduces conflicts of interest that could lead to breaches.
Question 15Governance
Which statement best describes the concept of 'tone at the top' in governance?
- Leadership behavior and messaging that shape the organization's ethical culture Correct answer.
- The acoustic quality of boardroom presentations
- The seniority ranking of executives in the annual report
- The pricing strategy set by the marketing team
Explanation
Tone at the top refers to how senior leaders demonstrate and communicate ethical standards, which cascades through the organization. It is a foundational element of the control environment.
Question 16Governance
A board is reviewing whether to accept a major acquisition. Which governance action best reflects proper oversight before approval?
- Relying solely on the chief executive's verbal assurance
- Approving the deal immediately to avoid losing a competitive opportunity
- Deferring all due diligence to the target company's management
- Obtaining an independent valuation and challenging management's synergy assumptions Correct answer.
Explanation
Major transactions warrant independent analysis and board scrutiny of management's assumptions before approval. This protects shareholder interests and supports an informed decision.
Question 17Governance
What is the main purpose of an enterprise risk management framework?
- To replace the external audit function
- To set the company's dividend policy
- To guarantee that no adverse events will occur
- To integrate risk identification, assessment, and response across the whole organization Correct answer.
Explanation
An ERM framework provides a structured, entity-wide approach to identifying, assessing, and responding to risks in line with strategy. It supports informed decision-making rather than guaranteeing outcomes.
Question 18Governance
A company's risk register lists a risk as 'high' but no owner is assigned. Which governance weakness does this most directly reveal?
- Too frequent board reporting
- Unclear accountability for risk response Correct answer.
- Excessive reliance on external auditors
- An overly detailed risk appetite statement
Explanation
Assigning an owner is essential so that someone is accountable for monitoring and responding to each risk. A high-rated risk without an owner indicates a gap in accountability.
Question 19Governance
Which of the following best describes the role of the company secretary in governance?
- Supporting the board by ensuring proper procedures, records, and compliance with governance rules Correct answer.
- Setting the company's product pricing
- Conducting the external audit of financial statements
- Managing the firm's trading book
Explanation
The company secretary supports effective board operation by managing meetings, minutes, and governance compliance. This role helps ensure that board processes follow legal and regulatory requirements.
Question 20Governance
A director sits on the boards of two companies that are direct competitors. Which governance concern is most relevant?
- A potential conflict of interest requiring disclosure and possible recusal Correct answer.
- An improvement in the director's marketing skills
- An automatic increase in shareholder dividends
- A guaranteed reduction in audit fees
Explanation
Competing directorships can create conflicts of interest and confidentiality risks, so disclosure and recusal from affected decisions are typically required. Governance codes address such situations to protect the company.
Question 21Governance
What does 'board diversity' most commonly refer to in governance discussions?
- The geographic location of the head office
- The number of board meetings held each year
- A mix of skills, experience, backgrounds, and perspectives among directors Correct answer.
- The size of the company's workforce
Explanation
Board diversity concerns the range of skills, experience, and personal backgrounds represented on the board. Diverse perspectives can improve debate quality and decision-making.
Question 22Governance
An organization discovers that a senior executive bypassed an established approval control. What is the most appropriate governance response?
- Remove the control to avoid future conflicts
- Publicly blame junior staff without investigation
- Investigate the breach, reinforce the control, and apply consequences consistently Correct answer.
- Ignore the matter because of the executive's seniority
Explanation
Control breaches, especially by senior staff, should be investigated and addressed consistently to preserve the credibility of the control environment. Tolerating exceptions erodes discipline across the organization.
Question 23Governance
Which statement best captures the principle of 'comply or explain' in corporate governance codes?
- Entities must always comply with every provision without exception
- Entities may ignore the code if they are profitable
- Entities must explain their marketing strategy instead
- Entities should follow the code or publicly explain why they have not Correct answer.
Explanation
Comply-or-explain allows flexibility: organizations either follow governance provisions or disclose and justify deviations to shareholders. Transparency about deviations preserves accountability.
Question 24Governance
A board committee approves a related-party transaction involving a director's family business. What safeguard is most important to protect governance integrity?
- The transaction value is kept confidential from shareholders
- The interested director is excluded from discussion and voting on the transaction Correct answer.
- The interested director chairs the meeting to speed up the decision
- The transaction is approved without any disclosure to other directors
Explanation
Directors with a personal interest in a transaction should be recused from related deliberations and votes. This prevents self-dealing and ensures decisions reflect independent judgment.
Question 25Governance
Which of the following best describes the role of an independent audit committee in financial reporting?
- Setting the salaries of all operational staff
- Selling the company's investment products
- Preparing the monthly management accounts
- Overseeing the integrity of financial statements and the effectiveness of internal controls Correct answer.
Explanation
The audit committee oversees financial reporting integrity, internal controls, and the audit process on behalf of the board. It does not prepare accounts or perform management functions.
Question 26Governance
A company's board has delegated authority to management for all operational decisions below a specified threshold. What is the primary governance reason for documenting this delegation in a formal authority matrix?
- It transfers legal liability from directors to managers.
- It removes the need for an internal audit function.
- It creates a clear boundary of accountability between the board and management. Correct answer.
- It ensures management can act without any oversight.
Explanation
A delegation-of-authority matrix defines which decisions are reserved to the board and which are delegated to management, thereby establishing clear accountability boundaries. It does not remove oversight, eliminate internal audit, or transfer legal duties that directors cannot delegate away.
Question 27Governance
Which governance mechanism most directly enables shareholders to hold directors accountable for their stewardship of the company?
- The company's code of conduct for employees.
- The annual general meeting and periodic director re-election. Correct answer.
- The risk appetite statement.
- The internal audit charter.
Explanation
Shareholders exercise accountability primarily through general meetings, where they can vote on director re-election, remuneration, and other resolutions. The code of conduct, internal audit charter, and risk appetite statement are internal governance tools that do not directly provide shareholder accountability.
Question 28Governance
A board establishes a separate risk committee chaired by an independent director. Which outcome most directly supports the committee's effectiveness?
- The committee receives regular, unfiltered risk information from management. Correct answer.
- The committee meets only when a crisis occurs.
- The committee's minutes are kept confidential from the full board.
- The committee's chair also serves as the chief risk officer.
Explanation
An effective risk committee needs timely, complete, and unbiased risk information to challenge management and advise the board. Meeting only in crises, combining the chair and CRO roles, or withholding minutes from the full board would undermine oversight.
Question 29Governance
Which statement best describes the purpose of a board-approved risk appetite statement?
- It lists every operational risk event that occurred in the prior year.
- It sets the amount and type of risk the organization is willing to accept in pursuit of its objectives. Correct answer.
- It replaces the need for a risk register.
- It assigns blame for risk failures to individual managers.
Explanation
A risk appetite statement articulates the level and types of risk the board is willing to accept to achieve strategic objectives. It guides decision-making and risk limits but does not replace a risk register, catalog past events, or assign blame.
Question 30Governance
A non-executive director is described as 'independent'. Which characteristic is most consistent with that description?
- The director is a close family member of the chief executive.
- The director has no material business or personal relationship with the company or its management. Correct answer.
- The director previously served as the company's chief financial officer until last year.
- The director holds a significant block of shares in a key supplier.
Explanation
Independence generally means the absence of relationships that could materially influence the director's judgment, such as recent employment, family ties, or significant commercial links. A recent executive role, supplier shareholding, or family relationship would normally compromise independence.
Question 31Governance
Which of the following is the most appropriate role for the board in relation to the organization's enterprise risk management framework?
- Approving the framework and overseeing its implementation. Correct answer.
- Performing the internal audit testing of risk controls.
- Conducting the day-to-day risk assessments of operational staff.
- Preparing the detailed risk register entries for each business unit.
Explanation
The board sets the tone, approves the ERM framework, and oversees its operation, while management implements the framework and staff perform day-to-day assessments. Internal audit provides independent assurance rather than owning the framework.
Question 32Governance
A company's governance code requires the board to explain why it has not complied with a particular provision. What is the primary purpose of this 'comply or explain' approach?
- To replace all statutory governance requirements with voluntary guidance.
- To allow companies to ignore governance standards without consequence.
- To ensure every company adopts an identical governance structure.
- To provide flexibility for companies to adapt governance practices to their circumstances while remaining accountable. Correct answer.
Explanation
Comply or explain permits departures from code provisions where justified, provided the company explains its reasons to shareholders, preserving flexibility and accountability. It does not permit silent non-compliance, override statute, or impose uniformity.
Question 33Governance
An organization's whistleblowing policy allows staff to report concerns anonymously to an independent channel. Which governance objective does this policy most directly support?
- Increasing the speed of product development.
- Maximizing short-term profitability.
- Strengthening the control environment by enabling early detection of misconduct. Correct answer.
- Reducing the cost of external audit.
Explanation
Whistleblowing channels support the control environment by encouraging early reporting of misconduct and reducing the likelihood of concealed wrongdoing. They are not designed to boost profitability, lower audit fees, or accelerate product development.
Question 34Governance
A board is considering a proposal to appoint the former chief executive as chair of the audit committee. Which governance concern is most relevant?
- The proposal will improve the company's credit rating.
- The proposal will increase the frequency of audit committee meetings.
- The proposal may impair the independence and objectivity of the audit committee. Correct answer.
- The proposal will reduce the company's tax liability.
Explanation
A former chief executive would typically lack independence from management, and audit committees require independent members to oversee financial reporting and external audit objectively. Meeting frequency, tax liability, and credit ratings are not the primary governance concerns raised by this appointment.
Question 35Governance
A director learns of a potential conflict of interest regarding a supplier contract under discussion. What is the most appropriate governance action?
- Continue as normal because the conflict is only potential.
- Disclose the interest promptly and recuse from both discussion and voting on the matter. Correct answer.
- Participate in the discussion but abstain from the final vote.
- Delegate the decision to a subordinate who reports to the director.
Explanation
Directors should disclose conflicts as soon as they arise and withdraw from both deliberation and voting to protect the integrity of board decisions. Partial participation or delegation to a subordinate does not remove the conflict.
Question 36Governance
A board's risk register shows that a key risk has no assigned owner and no mitigation plan. Which governance weakness does this most directly indicate?
- Inadequate risk ownership and accountability. Correct answer.
- Overinvestment in internal audit.
- Excessive board independence.
- Excessive shareholder engagement.
Explanation
Assigning risk owners and mitigation plans is fundamental to accountability in risk management; their absence signals that no one is responsible for managing the risk. Board independence, internal audit resourcing, and shareholder engagement are unrelated to this specific gap.
Question 37Governance
An internal audit report identifies a significant control weakness in the finance function. To whom should the chief audit executive report this finding in the first instance?
- The entire workforce via a company-wide email.
- The audit committee, because it oversees internal audit and financial reporting. Correct answer.
- The marketing department, to manage reputational messaging.
- The external auditor, so they can adjust the audit plan.
Explanation
The chief audit executive should report significant control weaknesses to the audit committee, which has oversight responsibility for internal audit and financial reporting. Reporting first to the external auditor, the whole workforce, or marketing would bypass the proper governance channel.
Question 38Governance
A company's board charter reserves certain decisions to the board, including major acquisitions above a specified value. Management completes a major acquisition without board approval. What is the most appropriate board response?
- Investigate the breach, assess the impact, and reinforce the authority framework. Correct answer.
- Ratify the transaction without further review to avoid disruption.
- Delegate the matter to the external auditor for resolution.
- Ignore the breach because the acquisition was commercially successful.
Explanation
A breach of reserved authority undermines governance and should be investigated, with consequences and remedial action to reinforce the framework. Automatic ratification, ignoring the breach, or shifting responsibility to the external auditor would weaken accountability.
Question 39Governance
A board is evaluating whether to approve a significant related-party transaction between the company and a director's family business. Which safeguard is most important?
- Approval by the director's family members.
- Review and approval by independent directors with no interest in the transaction. Correct answer.
- Approval by the chief executive alone.
- Approval by the external auditor.
Explanation
Related-party transactions should be reviewed and approved by disinterested independent directors to manage conflicts and protect minority shareholders. Approval by interested family members, the CEO alone, or the external auditor does not provide the necessary independent oversight.
Question 40Governance
Which statement best describes the role of the company secretary in supporting governance?
- The company secretary sets the company's commercial strategy.
- The company secretary ensures board procedures are followed and advises on governance matters. Correct answer.
- The company secretary independently audits the financial statements.
- The company secretary represents shareholders in litigation.
Explanation
The company secretary supports the board by ensuring proper procedures, maintaining records, and advising on governance obligations. The role does not involve setting commercial strategy, auditing financial statements, or representing shareholders in litigation.
Question 41Governance
A board is assessing its own performance. Which practice most supports an effective board evaluation?
- Using an independent external facilitator periodically, alongside internal self-assessment. Correct answer.
- Limiting the evaluation to financial performance metrics.
- Relying solely on self-assessment by the chair.
- Conducting the evaluation only when a crisis occurs.
Explanation
Periodic independent external facilitation, combined with internal self-assessment, brings objectivity and fresh perspective to board evaluation. Relying solely on the chair, focusing only on financial metrics, or evaluating only in crises limits the value of the review.
Question 42Governance
A company's remuneration committee is considering a bonus structure that rewards short-term revenue growth without regard to risk. Which governance concern is most relevant?
- The structure may encourage excessive risk-taking and misalign with long-term shareholder interests. Correct answer.
- The structure will improve the company's credit rating.
- The structure will increase the frequency of board meetings.
- The structure will reduce the company's tax obligations.
Explanation
Remuneration structures that reward short-term results without risk adjustment can incentivize excessive risk-taking and harm long-term value. Tax obligations, meeting frequency, and credit ratings are not the primary governance concerns raised by such a structure.
Question 43Governance
Which of the following best describes the concept of 'board diversity' in governance discussions?
- Limiting board membership to a single demographic group.
- Including directors with a range of skills, experience, backgrounds, and perspectives. Correct answer.
- Ensuring all directors have identical professional backgrounds.
- Appointing directors solely based on tenure.
Explanation
Board diversity refers to a mix of skills, experience, backgrounds, and perspectives that improves decision-making and challenge. Identical backgrounds, tenure-only appointments, or single-group membership are the opposite of diversity.
Question 44Governance
A board delegates day-to-day risk management to management but retains oversight. Which principle does this best illustrate?
- Abolition of the internal audit function.
- Transfer of all risk to external parties.
- Separation of ownership and control with accountability. Correct answer.
- Elimination of board responsibility for risk.
Explanation
Delegating operational risk management while retaining oversight reflects the separation of ownership and control, with the board remaining accountable. It does not eliminate board responsibility, transfer risk externally, or remove internal audit.
Question 45Governance
An organization's risk culture is weak, with employees reluctant to report concerns. Which governance action is most likely to improve risk culture?
- Limiting risk training to senior executives only.
- Removing risk considerations from performance evaluations.
- Leaders visibly modeling risk-aware behavior and reinforcing speak-up channels. Correct answer.
- Reducing the frequency of board risk reporting.
Explanation
Risk culture is shaped by leadership behavior and reinforced through speak-up channels, training, and performance incentives. Reducing reporting, removing risk from evaluations, or limiting training would weaken rather than strengthen the culture.
Question 46Governance
A board is reviewing a proposal to establish a separate board risk committee. Which factor is most relevant in deciding whether to create one?
- The company's advertising budget.
- The number of employees in the marketing department.
- The length of the annual general meeting.
- The size and complexity of the organization's risk profile. Correct answer.
Explanation
Whether to establish a dedicated risk committee depends on the scale, complexity, and nature of the organization's risks and the board's capacity to oversee them. Marketing headcount, advertising budget, and AGM length are not relevant governance considerations.
Question 47Governance
A board discovers that management has consistently understated risk exposures in board reports. Which governance response best addresses the root cause?
- Strengthen independent assurance and challenge processes over risk reporting. Correct answer.
- Reduce the frequency of board risk discussions.
- Delegate risk reporting entirely to the external auditor.
- Accept the reports because management has more information.
Explanation
Understated risk reporting signals a need for stronger independent assurance, challenge, and verification of management information. Accepting the reports, reducing discussion, or delegating entirely to the external auditor would not correct the underlying governance weakness.
Question 48Governance
A director believes the board is not receiving sufficient information to challenge management. Which action is most consistent with the director's fiduciary duties?
- Remain silent to preserve board harmony.
- Resign immediately without explanation.
- Share confidential board information with external parties.
- Request additional information and escalate the concern through the chair. Correct answer.
Explanation
Directors have a duty to act with due care and to seek the information needed to exercise effective oversight, escalating concerns through proper channels. Silence, unexplained resignation, or breaching confidentiality would not fulfill those duties.
Question 49Governance
An organization's governance framework assigns risk oversight to the audit committee, but the committee's agenda is dominated by financial reporting. Which governance issue does this most likely create?
- Excessive focus on internal audit.
- Overstaffing of the finance department.
- Insufficient attention to risk oversight responsibilities. Correct answer.
- Too much shareholder engagement.
Explanation
If the audit committee's agenda is consumed by financial reporting, its risk oversight responsibilities may be neglected, creating a governance gap. Internal audit focus, finance staffing, and shareholder engagement are not the primary issues indicated.
Question 50Governance
A company's board includes several directors who have served for over fifteen years. Which governance concern is most relevant?
- Long tenure automatically increases board diversity.
- Long tenure may reduce independence and fresh perspective. Correct answer.
- Long tenure guarantees superior financial performance.
- Long tenure eliminates the need for board evaluation.
Explanation
Extended tenure can compromise independence and limit the introduction of new perspectives, which is why many codes recommend periodic refreshment or review. Long tenure does not guarantee performance, remove the need for evaluation, or increase diversity.