* Annual Comprehensive Financial Report (ACFR):
* TheACFR(formerly CAFR) is the primary source for a state's annual financial information, including liability and cash flow data.
* It provides comprehensive financial statements, including the balance sheet, statement of activities, and cash flow statements.
* Explanation of Answer Choices:
* A. PAR: ThePerformance and Accountability Report (PAR)focuses on federal agencies and includes performance goals and achievements but lacks detailed liability and cash flow data for states.
* B. ACFR: Correct. The ACFR is the best source for detailed liability and cash flow data at the state level.
* C. Appropriations bill: Provides legislative authority for spending but does not include detailed financial data.
* D. Statement of activities: This is part of the ACFR but does not include all necessary cash flow or liability data.
References:
* Government Finance Officers Association (GFOA),Best Practices for ACFR Reporting.
* GASB,Annual Comprehensive Financial Report Guidance.

What Is a Risk Profile?
* Arisk profilerepresents the aggregate level and types of risks that an organization is willing to accept in pursuit of its strategic objectives. It aligns with the organization's risk appetite and tolerance and helps prioritize and manage risks effectively.
* This profile typically includes key risks, their likelihood, and potential impact, as well as how those risks align with the organization's mission and strategy.
Why Is Risk Profile the Correct Answer?
* The risk profile provides an enterprise-wide view of risks and their potential influence on achieving strategic goals. It aggregates risks across all levels of the organization and ensures that management considers them when making decisions.
Why Other Options Are Incorrect:
* A. Risk Register:While a risk register includes detailed descriptions of individual risks, it does not aggregate risk levels or types across the organization.
* B. Risk and Control Evaluation Matrix:This tool evaluates specific risks and controls but does not capture the organization's overall risk appetite or profile.
* D. Risk and Control Assessment Tool:This is a generic tool for assessing risks and controls, not for aggregating the overall risk picture.
References and Documents:
* OMB Circular A-123:Specifies the need for agencies to maintain a risk profile as part of enterprise risk management.
* COSO ERM Framework (2017):Defines a risk profile as central to managing risks in alignment with strategic objectives.