CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following represents the PRIMARY risk-management responsibility of the third line of defense?

A Providing assurance of the effectiveness of risk management activities
B Providing advisory services on enterprise risk management
C Providing benchmarking on other organizations' risk management programs
D Providing guidance on the design of effective controls

Explanation

The third line of defense provides independent assurance that risk-management activities and related controls are effective. Advisory guidance and control design are management or second-line activities.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1081

Community Discussion