The greatest benefit of identifying appropriate risk owners is that accountability is established for risk treatment decisions. Risk owners are the individuals or groups who are responsible and accountable formanaging a specific risk and its associated actions and outcomes. By identifying appropriate risk owners, the organization can ensure that the risk treatment decisions are made by the people who have the authority, knowledge, and interest in the risk. Stakeholders beingconsulted, risk owners being informed, and responsibility being established are other possible benefits, but they are not as great as accountability being established. References = ISACA Certified in Risk and Information Systems Control (CRISC) Certification Exam Question and Answers, question 8; CRISC Review Manual, 6th Edition, page 97.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit