Certified in Risk and Information Systems Control (CRISC) — Question 114

Which of the following is the MOST important characteristic of an effective risk management program?

Answer options

• A. Risk response plans are documented.
• B. Key risk indicators are defined.
• C. Risk ownership is assigned.
• D. Controls are mapped to key risk scenarios.

Correct answer: C

Explanation

The correct answer, C, emphasizes the necessity of assigning risk ownership, which is vital for accountability and effective risk management. While options A, B, and D are important components of a risk management program, they do not ensure that someone is responsible for managing the risks, which is essential for the program's success.