Senior management's decision to adopt new inventory management software despite its newness and associated risks illustrates 'Risk Appetite'. Risk appetite is the amount of risk, on a broad level, an organization is willing to accept in pursuit of its objectives before action is deemed necessary to reduce the risk. It reflects the enterprise's willingness to take risks to achieve its goals, which is clearly demonstrated in this scenario.References: COSO Enterprise Risk Management Framework

When using the maturity model approach for assessing an organization's risk management program, the activity of "monitor and review" is typically examined. The maturity model approach evaluates the development and effectiveness of risk management practices over time, identifying areas for improvement and measuring progress against established benchmarks.
Monitoring and reviewing involve regularly assessing the risk management processes and outcomes to ensure they remain effective and are continuously improved. This includes evaluating the implementation of risk management strategies and making necessary adjustments based on performance and changing conditions.
References:
* IIA Practice Guide: Assessing the Adequacy of Risk Management Using ISO 31000
* COSO Enterprise Risk Management Framework

Section: Volume C

Section: Volume B

Section: Volume E