Certified in Risk and Information Systems Control (CRISC) — Question 44

Which of the following is the MOST effective way to mitigate identified risk scenarios?

Answer options

• A. Document the risk tolerance of the organization.
• B. Assign ownership of the risk response plan.
• C. Provide awareness in early detection of risk.
• D. Perform periodic audits on identified risk areas.

Correct answer: B

Explanation

Assigning ownership of the risk response plan (B) ensures accountability and clarity in managing risks, making it the most effective approach. While documenting risk tolerance (A), raising awareness (C), and performing audits (D) are important, they do not directly empower individuals to take action on risk management.