Certified in Risk and Information Systems Control (CRISC) — Question 186

Which of the following is the MOST important component in a risk treatment plan?

Answer options

• A. Target completion date
• B. Treatment plan ownership
• C. Treatment plan justification
• D. Technical details

Correct answer: B

Explanation

The correct answer is B, Treatment plan ownership, as it designates responsibility for executing the risk treatment plan, ensuring accountability. The other options, while important, do not carry the same weight in terms of who is responsible for managing the risks effectively.