Certified in Risk and Information Systems Control (CRISC) — Question 563

Who is MOST appropriate to be assigned ownership of a control?

Answer options

• A. The individual responsible for control operation
• B. The individual responsible for testing the control
• C. The individual informed of the control effectiveness
• D. The individual accountable for monitoring control effectiveness

Correct answer: A

Explanation

The correct answer is A because the individual responsible for control operation is directly engaged with the control's functioning and can ensure its effectiveness. Options B and C do not entail ownership, as they are focused on testing and being informed, respectively, while option D relates to monitoring rather than ownership.