14 In an audit, risk assessment and internal control should be built into the way strategy is analyzed and implemented. The authors state that likewise, the manager should take a strategic approach to reviewing risk, controls, and compliance and the authors developed 10 standards. The standard that is the "main stage" and involves checking the way risks are addressed and whether smart controls are in place is called the QUESTION 15 Which of the following is true about risk appetite: Risk appetite is the level of tolerance for risk in their work. Risk mitigation and risk appetite mean the same thing. Risk registers is another term for risk appetite. "Perceptions of risk" is another term for risk appetite