CRISC Certified in Risk and Information Systems Control – Question059

Which of the following role carriers is accounted for analyzing risks, maintaining risk profile, and risk-aware decisions?

A.
Business management
B. Business process owner
C. Chief information officer (CIO)
D. Chief risk officer (CRO)

Correct Answer: D

Explanation:

Explanation:
Business management is the business individuals with roles relating to managing a program. They are typically accountable for analyzing risks, maintaining risk profile, and risk-aware decisions. Other than this, they are also responsible for managing risks, react to events, etc.
Incorrect Answers:
B: Business process owner is an individual responsible for identifying process requirements, approving process design and managing process performance. He/she is responsible for analyzing risks, maintaining risk profile, and risk-aware decisions but is not accounted for them.
C: CIO is the most senior official of the enterprise who is accountable for IT advocacy; aligning IT and business strategies; and planning, resourcing and managing the delivery of IT services and information and the deployment of associated human resources.
CIO has some responsibility analyzing risks, maintaining risk profile, and risk-aware decisions but is not accounted for them.