Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
risk owner should be the person accountable for the business process affected by the risk, ensuring they can assess, escalate, and make informed decisions about mitigation strategies
A risk owner is like a business unit manager who is responsible for ensuring their operations run smoothly with minimal risk. They own the risk because it affects their process, but the actual mitigation steps (such as security controls or policy enforcement) may be carried out by other teams.
D. The risk owner is typically the person who is accountable for the business process that is affected by the risk. This person has the authority and responsibility to manage the risk and ensure that appropriate risk responses are implemented.