16) These help the company address all applicable laws and regulations. A) Compliance objectives B) Opcrations objectives C) Reporting objectives D) Strategic objectives 17) Fis not a risk response identified in the COSO Enterprise Risk Management Framework. A) Acceptance B) Avoidance C) Monitoring D) Sharing 18) remains after management implements internal control(s). A) Inherent risk B) Residual risk C) Risk appetite D) Risk assessment 19) How is expected loss calculated when performing risk assessment? A) impact times expected loss B) impact times likelihood C) inherent risk times likelihood D) residual risk times likelihood 20) Which of the following factors are included in an entity's Control Environment as defined by the COSO Internal Control Integrated Framework? A) Organizational structure, management philosophy, and monitoring B) Integrity and ethical values, assignment of authority, and human resource practices C) Risk assessment, assignment of responsibility, and human resource practices D) Competence of personnel, segregation of duties, and fraud risk assessment