A risk practitioner observed that a high number of policy exceptions were approved by senior management. Which of the following is the risk practitioner's BEST course of action to determine root cause?
D. Interview the control owner.
The risk practitioner's best course of action to determine the root cause of the high number of policy exceptions approved by senior management is to interview the control owner. The control owner is responsible for ensuring that the control is effective and adhered to, and they should have insight into why these exceptions are occurring. By interviewing the control owner, the risk practitioner can gain valuable information about potential gaps in the control environment, understand the rationale behind the policy exceptions, and identify opportunities to improve the policy or the control process.
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.CRISC Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CbtL
8 months, 2 weeks agoKoulyo
9 months, 1 week agoBroesweelies
9 months, 2 weeks ago