Certified in Risk and Information Systems Control (CRISC) — Question 321

An organization is preparing to transfer a large number of customer service representatives to the sales department. Of the following, who is responsible for mitigating the risk associated with residual system access?

Answer options

• A. IT service desk manager
• B. Access control manager
• C. Customer service manager
• D. Sales manager

Correct answer: C

Explanation

The Customer Service Manager is responsible for ensuring that the transition to the sales department does not leave residual access that could pose a risk. The IT service desk manager and access control manager may assist, but the primary responsibility falls on the customer service manager as they oversee the representatives being transferred. The sales manager's role is more focused on the sales team rather than access management.