NO.PZ2023031302000011
问题如下：
The manager considers appropriate policies for the governance of the firm’s risk reporting framework. Which of the following would be least appropriate for the manager to recommend?
选项：
A.The central operational risk function should aggregate information from each of the business units about operational risk exposures.
Weaknesses and vulnerabilities in the control systems should be reported to the audit committee.
C.The audit committee is responsible for overseeing the proper and effective execution of the ORM framework.
D.Action plans are tracked and reported by the business-line owner.
解释：
考点：Operational Risk Reporting
解析：执行委员会（而非审计委员会）负责监督ORM框架中适当且有效的执行。故选项C表述不正确，当选。其余选项表述均正确。
老师，weakness要主动上报给audit吗？
这个不应该是公司不想被查，但是被审计查出来的吗？
