CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ67

VerifiedGovernance of Enterprise IT

An enterprise is nearing the escalation date for a significant IT risk. The IT steering committee wants to determine who is accountable for the risk response. Where should the committee locate this information?

Explanation

A risk register documents each identified risk along with its assigned risk owner and response actions. It is the record used to identify who is responsible for responding to a specific risk.

Community Discussion

No comments yet. Be the first to start the discussion!