Certified in Risk and Information Systems Control (CRISC) — Question 529

What is the PRIMARY role of the application owner when changes are being introduced into an existing environment?

Answer options

• A. Updating control procedures and documentation
• B. Notifying owners of affected systems after the changes are implemented
• C. Determining possible losses due to downtime during the changes
• D. Approving the proposed changes based on impact analysis

Correct answer: D

Explanation

The application owner's primary responsibility is to approve the proposed changes based on an impact analysis to ensure that they align with the application's operational requirements. The other options, while important, do not reflect the primary role of the application owner during change implementation.