CISA · Question #169
Of the following, who should be responsible for cataloging and inventorying robotic process automation (RPA) processes?
The correct answer is B. Business owner. The business owner should be responsible for cataloging and inventorying RPA processes because RPA automates business processes, and the business owner has the authoritative knowledge of what those processes are, their scope, criticality, and dependencies. Ownership of the proces
Question
Of the following, who should be responsible for cataloging and inventorying robotic process automation (RPA) processes?
Options
- AIT personnel
- BBusiness owner
- CInformation security personnel
- DData steward
How the community answered
(25 responses)- B92% (23)
- C4% (1)
- D4% (1)
Explanation
The business owner should be responsible for cataloging and inventorying RPA processes because RPA automates business processes, and the business owner has the authoritative knowledge of what those processes are, their scope, criticality, and dependencies. Ownership of the process implies ownership of its automated counterpart. IT personnel (A) may support implementation but do not own the business processes. Information security (C) governs risk and controls but does not own the processes. Data stewards (D) are responsible for data quality and governance, not process inventories.
Topics
Community Discussion
No community discussion yet for this question.