Certified in Risk and Information Systems Control (CRISC) — Question 226

Which of the following is MOST critical when designing controls?

Answer options

• A. Involvement of process owner
• B. Involvement of internal audit
• C. Identification of key risk indicators
• D. Quantitative impact of the risk

Correct answer: A

Explanation

The involvement of the process owner is crucial because they have the best understanding of the processes and risks involved. While internal audit, key risk indicators, and quantitative impacts are important, they do not carry the same weight in ensuring that the controls are practical and effectively designed.