Certified in Risk and Information Systems Control (CRISC) — Question 22

Which of the following role carriers is accounted for analyzing risks, maintaining risk profile, and risk-aware decisions?

Answer options

• A. Business management
• B. Business process owner
• C. Chief information officer (CIO)
• D. Chief risk officer (CRO)

Correct answer: A

Explanation

The correct answer is A, Business management, as this role typically involves analyzing risks and making decisions that impact the organization's risk profile. The other options, while important, do not primarily focus on these responsibilities; for example, the Chief Risk Officer (CRO) specifically focuses on risk management rather than broader business decisions.