Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A is correct because the question is technical in nature. The ask is "whether a new control properly mitigates data loss risk within a system" - this reads like a technical assessment. It feels like whoever doing this focuses on the control design and effectiveness.
A. Control owner. The "A. Control owner" is best suited to determine whether a new control properly mitigates data loss risk within a system. The control owner is responsible for the design, implementation, and effectiveness of controls related to their specific area of responsibility. In this case, the control owner would be responsible for assessing whether the new control effectively addresses the data loss risk within the system. While the other roles (risk owner, data owner, system owner) may have related responsibilities, the control owner is specifically responsible for the oversight of controls and their effectiveness, making them the most suitable individual to determine the adequacy of the new control in mitigating data loss risk.
Control owners are responsible for the effectiveness of the control. Design rests with the risk owner's approval. I am going with A, standing corrected.