Which of the following is the responsibility of a risk owner?

The correct answer is C. Ensuring control effectiveness is monitored. A risk owner is responsible for monitoring and ensuring the effectiveness of controls that mitigate the risks they own. They oversee how risks are managed within their area of responsibility, ensuring controls operate as intended and that residual risk remains within acceptable l

Submitted by noor.lb· Apr 18, 2026Information Security Risk Management

Question

Options

ADetermining the organization's risk appetite
BImplementing controls to transfer the risk
CEnsuring control effectiveness is monitored
DEstablishing and operating controls

How the community answered

(51 responses)

A
2% (1)
B
2% (1)
C
90% (46)
D
6% (3)

Explanation

A risk owner is responsible for monitoring and ensuring the effectiveness of controls that mitigate the risks they own. They oversee how risks are managed within their area of responsibility, ensuring controls operate as intended and that residual risk remains within acceptable limits.

Topics

#Risk Owner#Risk Management Roles#Control Monitoring#Risk Accountability

Community Discussion

No community discussion yet for this question.

Full CISM Practice