nerdexam
Isaca

CISM · Question #516

An organization has identified IT failures in a call center application. Of the following, who should own this risk?

The correct answer is A. Head of the call center. The head of the call center should own the risk related to IT failures in the call center application. While the IT department may be responsible for maintaining the infrastructure, the call center manager has the primary responsibility for ensuring the smooth operation of the…

Submitted by asante_acc· Apr 18, 2026Information Security Risk Management

Question

An organization has identified IT failures in a call center application. Of the following, who should own this risk?

Options

  • AHead of the call center
  • BChief executive officer (CEO)
  • CInformation security manager
  • DHead of the IT department

How the community answered

(30 responses)
  • A
    80% (24)
  • B
    3% (1)
  • C
    7% (2)
  • D
    10% (3)

Explanation

The head of the call center should own the risk related to IT failures in the call center application. While the IT department may be responsible for maintaining the infrastructure, the call center manager has the primary responsibility for ensuring the smooth operation of the call center’s processes and handling any disruptions, including IT-related issues. This ensures accountability and prompt response to address the impact on operations.

Topics

#risk ownership#business risk#operational risk#roles and responsibilities

Community Discussion

No community discussion yet for this question.

Full CISM Practice