Certified in Risk and Information Systems Control (CRISC) — Question 972

Which of the following is the MOST effective way to help ensure accountability for managing risk?

Answer options

• A. Assign process owners to key risk areas.
• B. Assign incident response action plan responsibilities.
• C. Create accurate process narratives.
• D. Obtain independent risk assessments.

Correct answer: A

Explanation

The correct answer, A, emphasizes the importance of having designated individuals responsible for key risk areas, which enhances accountability. While options B, C, and D are valuable practices, they do not directly assign responsibility for managing risks, which is crucial for effective risk management.