Certified in Risk and Information Systems Control (CRISC) — Question 352

Which of the following roles is BEST suited to help a risk practitioner understand the impact of IT-related events on business objectives?

Answer options

• A. Process owners
• B. IT management
• C. Senior management
• D. Internal audit

Correct answer: A

Explanation

Process owners are directly involved with specific business processes and can provide insights into how IT-related events impact their areas. IT management, senior management, and internal audit have broader perspectives, but they may not have the detailed operational knowledge necessary for this specific task.