Certified in Risk and Information Systems Control (CRISC) — Question 328

Accountability for a particular risk is BEST represented in a:

Answer options

• A. risk register.
• B. RACI matrix.
• C. risk catalog.
• D. risk scenario.

Correct answer: B

Explanation

The RACI matrix is specifically designed to clarify roles and responsibilities concerning tasks and risks, making it the best option for accountability. A risk register primarily tracks risks but does not explicitly define accountability, while a risk catalog is more focused on documenting risks rather than assigning responsibility. Risk scenarios outline potential risk events but do not clarify who is accountable for them.