Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Business process owner The risk associated with a control gap in a key process should ideally be owned by the business process owner. This is because the business process owner has the best understanding of the process, its objectives, and the impacts of the risks involved. They are also in the best position to determine what risk levels are acceptable, and to make decisions about implementing controls and other risk mitigation strategies. While the chief information security officer, operational risk manager, and key control owner may have roles in managing and mitigating the risk, the ultimate responsibility lies with the business process owner.
Owner of the risk, NOT the control. Risk owner The person in whom the organization has invested the authority and accountability for making risk-based decisions and who owns the loss associated with a realized risk scenario. Scope Notes: The risk owner may not be responsible for the implementation of risk treatment.
why not D?