Exam CRISC topic 1 question 1721 discussion

Assigning clear control ownership is the most effective way to ensure control failures are appropriately managed because: It establishes clear accountability and responsibility for managing, monitoring, and addressing control failures. Control owners proactively ensure controls operate effectively and respond quickly to failures or weaknesses. Ownership encourages timely escalation, remediation actions, and continuous improvement of control effectiveness. Why not the other options? A. Peer review: Valuable for oversight but does not assign direct accountability to handle control failures. B. Compensating controls: Useful as backup mechanisms, but they don't directly resolve or manage original control failures effectively. D. Control procedures: Essential documentation but ineffective without clearly defined ownership and accountability.

B. Compensating controls. Compensating controls are alternative measures or countermeasures put in place to mitigate the risk of control failures. These controls are designed to provide an additional layer of protection or to address deficiencies in primary controls. When a control failure occurs, compensating controls can help minimize the impact and ensure that the risk is still adequately managed.

compensating controls

I think B is the answer