CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is a responsibility of the second line of defense under the three lines of defense model?

A Owning risk scenarios and bearing the consequences of loss
B Alerting operational management to emerging issues
C Implementing corrective actions to address deficiencies
D Performing duties independently to provide assurance

Explanation

The second line of defense oversees and monitors risk management, providing guidance and escalating emerging issues to operational management. Risk ownership and corrective action implementation are first-line responsibilities, while independent assurance is provided by the third line.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1529

Community Discussion