Which of the following is a risk management tool described in the material?

• A. Audit Reports
• B. Payroll Scripts
• C. Time Tracking
• D. Attendance Logs

Answer: (A)

Managing risk relies on evidence-based evaluations that reveal where controls may be weak and where processes diverge from policy. Audit reports fit this need by providing formal, documented assessments that summarize findings from reviews of processes, controls, and compliance. They spotlight deviations, control gaps, and areas of potential risk, often noting the impact and recommended remediation. Because they create a governance-ready record of how controls performed over time, audit reports support regulatory compliance and ongoing improvement, making them a central risk management tool described in the material.

Automating payroll with scripts improves accuracy and efficiency, but that tool is focused on processing—not evaluating risk or documenting control effectiveness. Time tracking and attendance logs are important records that feed various processes, yet they are data sources; they do not by themselves serve as the risk management mechanism described.