Isaca
CISM · Question #609
At what point should risk ownership be assigned?
The correct answer is D. When the risk is identified. Risk ownership should be assigned as soon as the risk is identified to ensure accountability and prompt action in assessing, treating, and monitoring the risk.
Submitted by takeshi77· Apr 18, 2026Information Security Risk Management
Question
At what point should risk ownership be assigned?
Options
- AWhen the related vulnerability is identified
- BWhen asset ownership is assigned
- CWhen the risk treatment plan is executed
- DWhen the risk is identified
How the community answered
(18 responses)- A6% (1)
- B6% (1)
- D89% (16)
Explanation
Risk ownership should be assigned as soon as the risk is identified to ensure accountability and prompt action in assessing, treating, and monitoring the risk.
Topics
#Risk ownership#Risk identification#Risk management process#Accountability
Community Discussion
No community discussion yet for this question.