CRISC · Question #45
Which of the following will BEST help to ensure implementation of corrective action plans?
The correct answer is B. Assigning accountability to risk owners. Assigning accountability to risk owners is the most effective way to ensure the implementation of corrective action plans.
Question
Which of the following will BEST help to ensure implementation of corrective action plans?
Options
- AEstablishing employee awareness training
- BAssigning accountability to risk owners
- CSelling target dates to complete actions
- DContracting to third parties
How the community answered
(27 responses)- A22% (6)
- B67% (18)
- C4% (1)
- D7% (2)
Why each option
Assigning accountability to risk owners is the most effective way to ensure the implementation of corrective action plans.
Establishing employee awareness training informs employees but doesn't directly ensure the completion of specific corrective actions by responsible parties.
Assigning accountability to specific risk owners ensures that individuals are clearly responsible for overseeing and driving the completion of corrective action plans related to their assigned risks. This direct ownership fosters commitment, provides clear responsibility for progress, and facilitates effective follow-up, significantly increasing the likelihood of successful implementation.
Setting target dates is a good project management practice but doesn't, on its own, guarantee completion without clear accountability for meeting those dates.
Contracting to third parties might involve delegating tasks but shifts the direct responsibility rather than ensuring internal oversight and accountability for the plan's overall success.
Concept tested: Corrective action plan accountability
Source: https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.