Which steps are in manual assessment that is not found in automated assessment? Risk assessment/audit planning, self-assessment by control operators, setup of automated risk assessment Risk assessment/audit planning, self-assessment by control operators, controls understanding by assessors Risk assessment/audit planning, self-assessment by control operators, tracking of remediation plans Controls testing, evaluation of control effectiveness, tracking of remediation plans Of the following competing demands, what is the least risky for an organisation to forego? Choose the best answer Fix the regulator's risk focus of the month, as 3 prominent copycat incidents have already happened in the last 2 weeks Management has discussed and decided that it will rather pay for the losses incurred in the incident happened than addressing the problem which is costly to fix Fix the documentation gap instead of the operational gap as the former has been identified by the auditor while the latter has not Deal with the documentation of the controls in order to prepare for the upcoming audit