Audit Procedures & Risk Mitigation Flashcards

A power plant operator wants to reduce exposure to unplanned outage costs. Which risk mitigation strategy directly addresses this operational risk?

Answer: Implementing a preventive maintenance program with reliability performance tracking

A preventive maintenance program with performance tracking reduces unplanned outage frequency and duration, directly mitigating the operational risk of unexpected downtime costs.

During an audit, an auditor finds that a company's risk appetite statement has not been approved by the board of directors. What is the primary concern?

Answer: Risk-taking is not aligned with governance oversight and lacks board accountability

The board of directors is responsible for setting and approving risk appetite; without board approval, the risk appetite lacks proper governance oversight and accountability.

Which document typically defines the maximum allowable position size, stop-loss thresholds, and escalation procedures for an energy trading desk?

Answer: Trading risk policy and limits framework

A trading risk policy and limits framework formally establishes position limits, loss thresholds, and escalation procedures that govern risk-taking activity on the trading desk.

An auditor identifies that an energy company uses a single risk model for all commodities including electricity, natural gas, and crude oil. What limitation should the auditor flag?

Answer: Commodity-specific dynamics such as seasonality and delivery constraints may not be adequately captured by a generic model

Each energy commodity has unique price dynamics, seasonality, and physical delivery characteristics that a generic single model may fail to capture accurately, leading to mispriced risk.

What is the purpose of a heat rate contract in electricity risk management?

Answer: To convert between natural gas and electricity prices using a plant's conversion efficiency ratio

A heat rate contract links natural gas and electricity prices using a plant's heat rate (BTU per kWh), allowing generators to hedge the spark spread between fuel cost and power revenue.

When an energy risk auditor reviews a company's business continuity plan (BCP), which scenario is most critical to test for a trading operation?

Answer: Loss of access to trading systems and market data during peak market hours

For a trading operation, loss of trading systems and market data access during active market hours represents the highest-impact disruption scenario and must be a BCP testing priority.

An energy company audit reveals that counterparty credit exposure is monitored monthly rather than daily. For an active trading portfolio, what risk does this create?

Answer: Undetected credit limit breaches and accumulation of significant credit exposure between monitoring cycles

Monthly monitoring of an active portfolio means that credit limit breaches can go undetected for weeks, allowing credit exposure to build to dangerous levels before corrective action is taken.