CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ157

Risk Optimization

To reduce operating costs, an enterprise is moving from exclusively internally hosted applications to a combination of internally and externally hosted applications.

Of the following, the risk appetite for this decision would BEST be defined by the:

  • A vendor oversight committee.
  • B board of directors.
  • C chief information security officer.
  • D chief information officer.
Explanation

The board of directors sets the enterprise’s strategy and determines the level of risk the enterprise is willing to accept in achieving its strategic objectives. Management and specialist functions implement, manage, and report against that risk appetite.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!