Certified in Risk and Information Systems Control (CRISC) — Question 429

What are the responsibilities of the CRO?
Each correct answer represents a complete solution. (Choose three.)

Answer options

• A. Managing the risk assessment process
• B. Implement corrective actions
• C. Advising Board of Directors
• D. Managing the supporting risk management function

Correct answer: A, C, D

Explanation

The correct answers A, C, and D are all responsibilities of the CRO, as they involve managing and advising on risk-related matters. Option B is incorrect because while implementing corrective actions is important, it is not typically a direct responsibility of the CRO; this task is often delegated to operational managers.