Exam CRISC topic 1 question 844 discussion

Agree it is C.

C. Data owner The risk scenario should be reassigned to the data owner, as they are responsible for ensuring the proper handling, protection, and overall management of the data. While the cloud provider plays a role in securing and maintaining the data, the ultimate responsibility for managing the risk associated with data loss lies with the data owner.

While the cloud provider may have a role in mitigating the risk associated with data loss, ultimately, the responsibility for managing the risk rests with the organization's senior management. This includes identifying and assessing the risk, developing and implementing risk mitigation strategies, and monitoring the effectiveness of the risk management program. The data owner may also have a role in managing the risk associated with data loss, particularly if they are responsible for ensuring the confidentiality, integrity, and availability of the data. However, reassigning the risk scenario to senior management ensures that the responsibility for managing the risk is clearly defined and aligned with the organization's overall risk management strategy. Therefore, the risk scenario associated with data loss at the organization's cloud provider should be reassigned to senior management to ensure effective risk management and oversight.

This looks correct. Also see R3-106.