Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The process owner is the individual most familiar with the business process and the system’s operational requirements. They are responsible for ensuring that the process operates smoothly and efficiently. Therefore, it is important to communicate the risks identified in the assessment to the process owner, along with proposed risk reduction measures. The process owner is in the best position to make decisions regarding the implementation of those measures and can collaborate with the relevant teams to address the risks appropriately.
A. Inform the IT manager of the concerns and propose measures to reduce them. The most appropriate action after undertaking a risk assessment of a production system is for the risk manager to "A. Inform the IT manager of the concerns and propose measures to reduce them." The IT manager is responsible for the operation and management of the production system, and they need to be aware of any identified risks and potential vulnerabilities. The risk manager should communicate the findings and work collaboratively with the IT manager to propose and implement measures to mitigate or manage the identified risks. While involving process owners (option B) or the development team (option C) might be relevant depending on the context, it's important to inform the IT manager since they are directly responsible for the system's operation and security. Recommending a program to minimize concerns (option D) could be part of the proposed measures but should be communicated to the appropriate stakeholders.
Agree with B. Process Owner