CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ933

Governance

Who should be accountable for deciding which stakeholders must participate in developing a risk scenario?

  • A Risk owner
  • B Control owner
  • C Compliance manager
  • D Risk practitioner
Explanation

The risk practitioner coordinates risk-scenario development and engages the relevant stakeholders to ensure the scenario accurately reflects business processes, assets, threats, vulnerabilities, and controls. Risk owners retain accountability for risk-based decisions, while control owners are responsible for controls.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!