The Enterprise Risk Management Integrated Framework states that an organization must identify events, both positive and negative, as part of its risk management program. Which of the following is true with regard to events?
  a.Event identification occurs prior to development of objectives.
  b.Enterprise risk management is entirely focused on risks and ignores opportunities.
  c.Event identification occurs after the development of objectives.
  d.Events serve as the basis for establishing objectives and thus occur simultaneously with development of objectives.
  Answer:C
  Choice "C" is correct. Events can only be identified after the organizational objectives are identified. Events will either favorably or unfavorably impact the achievement of objectives. Risks (negative events) are only identifiable within the context of the objectives that they might impede.
  Choice "b" is incorrect. Enterprise risk management considers both positive events (opportunities) and negative events (risks).
  Choice "a" is incorrect. Events can only be identified after the organizational objectives are identified. Events will either favorably or unfavorably impact the achievement of objectives.
  Choice "d" is incorrect. Events are not the basis for establishing objectives. Events can only be identified after the organizational objectives are identified.