Certified in Risk and Information Systems Control (CRISC) — Question 95

An organization is planning to acquire a new financial system. Which of the following stakeholders would provide the MOST relevant information for analyzing the risk associated with the new IT solution?

Answer options

• A. Process owner
• B. Internal auditor
• C. Risk manager
• D. Project sponsor

Correct answer: A

Explanation

The process owner has firsthand knowledge of the operational processes that the financial system will impact, making their insights crucial for risk analysis. While the internal auditor, risk manager, and project sponsor have their roles, they may not possess as detailed an understanding of the specific processes affected by the new system.