IsacaIsaca
CRISC · Question #235
CRISC Question #235: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #235. The question stem and answer options stay visible for context.
Submitted by anna_se· Apr 18, 2026Governance
Question
A risk practitioner is reviewing accountability assignments for data risk in the risk register. Which of the following would pose the GREATEST concern?
Options
- AThe risk owner is not the control owner for associated data controls.
- BThe risk owner is in a business unit and does not report through the IT department.
- CThe risk owner is listed as the department responsible for decision-making.
- DThe risk owner is a staff member rather than a department manager.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk ownership#Accountability#Risk register#Risk governance