CRISC · Question #300
Which of the following will BEST help to ensure implementation of corrective action plans?
The correct answer is D. Assigning accountability to risk owners. Assigning accountability to risk owners is the most effective way to ensure the implementation of corrective action plans.
Question
Which of the following will BEST help to ensure implementation of corrective action plans?
Options
- AContracting to third parties
- BEstablishing employee awareness training
- CSetting target dates to complete actions
- DAssigning accountability to risk owners
How the community answered
(30 responses)- A3% (1)
- B17% (5)
- C7% (2)
- D73% (22)
Why each option
Assigning accountability to risk owners is the most effective way to ensure the implementation of corrective action plans.
Contracting to third parties might transfer the work but not necessarily the overall accountability for ensuring the plan's completion and effectiveness.
Employee awareness training is important for general security culture but does not directly ensure the implementation of specific corrective actions.
Setting target dates is a good practice for project management but lacks the enforcement mechanism provided by assigning direct accountability.
Assigning accountability for corrective action plans to specific risk owners ensures that there is a clear individual or team responsible for seeing the plan through to completion. This fosters ownership, drives commitment, and provides a point of contact for tracking progress and addressing roadblocks, significantly increasing the likelihood of successful implementation.
Concept tested: Corrective Action Plan Implementation
Source: https://learn.microsoft.com/en-us/compliance/regulatory/regulatory-compliance-dashboard-risk-assessment
Topics
Community Discussion
No community discussion yet for this question.