Which of the following is the MOST important reason for obtaining input from risk owners when implementing controls?

The correct answer is A. To manage the risk to an acceptable level. Obtaining input from risk owners is most important for managing the risk to an acceptable level. Risk owners understand the specific risks and their impact on business objectives, ensuring that implemented controls effectively address the risks without disrupting critical…

Submitted by lars.no· Apr 18, 2026Information Security Risk Management

Question

Options

ATo manage the risk to an acceptable level
BTo resolve vulnerabilities in enterprise architecture (EA)
CTo identify new threats impacting the business
DTo reduce risk mitigation costs

How the community answered

(43 responses)

A
88% (38)
B
2% (1)
C
2% (1)
D
7% (3)

Explanation

Obtaining input from risk owners is most important for managing the risk to an acceptable level. Risk owners understand the specific risks and their impact on business objectives, ensuring that implemented controls effectively address the risks without disrupting critical processes.

Topics

#Risk Management#Risk Owners#Control Implementation#Acceptable Risk

Community Discussion

No community discussion yet for this question.

Full CISM Practice