Certified in Risk and Information Systems Control (CRISC) — Question 465

Which of the following should be the GREATEST concern to a risk practitioner when process documentation is incomplete?

Answer options

• A. Inability to identify the risk owner
• B. Inability to identify process experts
• C. Inability to allocate resources efficiently
• D. Inability to complete the risk register

Correct answer: A

Explanation

The greatest concern is the inability to identify the risk owner, as this is crucial for accountability and effective risk management. Without knowing who is responsible for managing risks, the overall risk management process can become ineffective. The other options, while problematic, do not have as direct an impact on the fundamental structure of risk ownership.