Which of the following statements regarding corporate risk governance is wrong?
　　I        Management of the organization is ultimately responsible for risk oversight.
　　II       A risk committee is useful for enforcing the firm’s risk governance principles.
　　III      Effective risk governance requires multiple levels of accountability and authority.
　　IV     The point of risk governance is to minimize the amount of risk taken by the organization.
　　A.     I、III
　　B.     II
　　C.     I、III、IV
　　D.     all of the above
　　Answer: C
　　The Board of Directors is ultimately responsible for risk oversight.
　　Effective risk governance simply requires clear accountability, authority, and methods of communication; it is not necessary to have multiple levels.
　　The point of risk governance is to consider the methods in which risk-taking is permitted, optimized, and monitored; it is not necessarily to minimize the amount of risk taken.
　　The real point of risk governance is to increase the value of the organization from the perspective of the shareholders and/or stakeholders.