Isaca
CISM · Question #974
Risk management is MOST effective when there is risk and control:
The correct answer is C. ownership.. Risk management is most effective when there is clear risk and control ownership, because accountable owners have the authority and responsibility to decide treatment actions, allocate resources, and ensure controls operate as intended.
Submitted by tunde_lagos· Apr 18, 2026Information Security Risk Management
Question
Risk management is MOST effective when there is risk and control:
Options
- Areporting.
- Btransfer.
- Cownership.
- Ddocumentation.
How the community answered
(40 responses)- A8% (3)
- B3% (1)
- C78% (31)
- D13% (5)
Explanation
Risk management is most effective when there is clear risk and control ownership, because accountable owners have the authority and responsibility to decide treatment actions, allocate resources, and ensure controls operate as intended.
Topics
#Risk Ownership#Control Ownership#Risk Management Effectiveness#Accountability
Community Discussion
No community discussion yet for this question.