CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1816

Governance

A large organization is replacing its enterprise resource planning (ERP) system and has chosen not to implement the new system’s payroll module. Instead, it will continue using the current payroll system. Who should own the risk if the ERP and payroll systems do not operate as expected?

  • A The ERP administrator
  • B The business owner
  • C The project steering committee
  • D The IT project manager
Explanation

The business owner is accountable for risks to the business process, including risks arising from retaining the existing payroll system and its interaction with the new ERP system. The ERP administrator and IT project manager manage technical or project activities, while the steering committee provides oversight; none replaces business accountability for the operational risk.

Community Discussion

No comments yet. Be the first to start the discussion!