Certified in Risk and Information Systems Control (CRISC) — Question 812

Which of the following would be MOST helpful when communicating roles associated with the IT risk management process?

Answer options

• A. Skills matrix
• B. RACI chart
• C. Organizational chart
• D. Job descriptions

Correct answer: B

Explanation

The RACI chart is specifically designed to clarify roles and responsibilities in a project or process, making it the most suitable choice for the IT risk management process. While a skills matrix, organizational chart, and job descriptions provide useful information, they do not convey the specific accountabilities and interactions that a RACI chart does.