CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1742

Risk Assessment

Which of the following is the MOST important reason that a risk practitioner should identify stakeholders for every IT risk scenario?

  • A To ensure enterprise-wide risk management
  • B To identity key risk indicators (KRIs)
  • C To enable a comprehensive view of risk
  • D To establish control ownership
Explanation

Identifying the relevant stakeholders establishes accountability for the risk scenario, including ownership of the controls used to manage it. ISACA’s CRISC job-practice guidance specifies that key stakeholders are identified for IT risk scenarios to help establish accountability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!