Certified in Risk and Information Systems Control (CRISC) — Question 866

A vendor's planned maintenance schedule will cause a critical application to temporarily lose failover capabilities. Of the following, who should approve this proposed schedule?

Answer options

• A. Business application owner
• B. IT infrastructure manager
• C. Chief risk officer (CRO)
• D. Business continuity manager

Correct answer: A

Explanation

The business application owner is responsible for the overall management and performance of the application, making them the most suitable person to approve any maintenance that affects its operability. The IT infrastructure manager oversees the technical aspects, while the Chief Risk Officer and Business Continuity Manager focus on risk and continuity planning, which are secondary to the direct management of the application itself.