C_GRCAC_13 · Question #50
Which of the following must be specified when defining a mitigating control? Note: There are 2 correct answers to this question.
The correct answer is A. Control ID C. Risk Owner. You need to specify the control ID and the risk owner when defining a mitigating control. Control ID is a unique identifier for the mitigating control, and risk owner is the person who is responsible for monitoring and reporting on the mitigating control.
Question
Which of the following must be specified when defining a mitigating control? Note: There are 2 correct answers to this question.
Options
- AControl ID
- BReport
- CRisk Owner
- DOrganization
How the community answered
(49 responses)- A71% (35)
- B10% (5)
- D18% (9)
Explanation
You need to specify the control ID and the risk owner when defining a mitigating control. Control ID is a unique identifier for the mitigating control, and risk owner is the person who is responsible for monitoring and reporting on the mitigating control.
Topics
Community Discussion
No community discussion yet for this question.