Exam CRISC topic 1 question 706 discussion

Actual exam question from Isaca's CRISC

Question #: 706
Topic #: 1

[All CRISC Questions]

Who is the MOST appropriate owner for newly identified IT risk?

A. The manager responsible for IT operations that will support the risk mitigation efforts
B. The individual with the most IT risk-related subject matter knowledge
C. The individual with authority to commit organizational resources to mitigate the risk
D. A project manager capable of prioritizing the risk remediation efforts

Show Suggested Answer

Suggested Answer: C 🗳️

by hussmohsin at Jan. 25, 2021, 5:09 a.m.

Comments

Submit Cancel

Raj1510

Highly Voted 1 year, 12 months ago

support C

upvoted 5 times

...

CbtL

Most Recent 9 months, 1 week ago

Selected Answer: C

Agree it is C.

upvoted 1 times

...

john_boogieman

11 months, 1 week ago

Selected Answer: C

Risk owner The person in whom the organization has invested the authority and accountability for making risk-based decisions and who owns the loss associated with a realized risk scenario.

upvoted 2 times

...

Boubou480

11 months, 3 weeks ago

Selected Answer: C

Because the individual with authority to commit organizational resources is responsible for making decisions and allocating resources to address the IT risk. This person has the power to ensure that necessary resources and efforts are put into place to mitigate the risk effectively.

upvoted 2 times

...

Odenkyem

2 years, 8 months ago

Same as 704. See CRISC review manual page 100 section 2.8.2: In this case the answer is C

upvoted 3 times

...

hussmohsin

2 years, 11 months ago

I say the correct answer is C. It should be someone with Authority not knowledge

upvoted 4 times

travdaman

2 years, 11 months ago

I think C as well. According to ISACA, it's the dept heads who owns the risks as this person drives remediation.

upvoted 3 times

...