Which organization is implementing a project to automate the purchasing process, including the modification of approval controls. Which of the following tasks is lie responsibility of the risk…

The risk practitioner is responsible for the ongoing monitoring and assessment of controls to verify their continued effectiveness. During project-driven changes, it's crucial to confirm that current controls still adequately mitigate identified risks and that no new vulnerabilities are introduced or exacerbated by the modifications.

Testing controls post-project completion is typically part of quality assurance or a final audit, not the primary, ongoing responsibility of a risk practitioner during the implementation phase.

Updating controls is the responsibility of the control owner or the project team making the changes, based on the risk assessments, rather than solely the risk practitioner.

Performing a gap analysis is usually conducted during the initial assessment or design phase of a project to identify necessary control adjustments, not as the ongoing responsibility during implementation.