Who is ultimately responsible for approving methods and controls that will reduce any potential risk to an organization?
Suggested Answer: D
Get Premium GCED Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
4 comments · newest first
SY
Sylvia
2 days ago
I recall a question where the security auditor was involved in assessing risks, but not necessarily approving methods.
SA
Samira
7 days ago
I’m leaning towards senior management as well, but I wonder if the data custodian has any responsibility in this area.
SH
Sherita
12 days ago
I feel like the data owner has a significant say in this too. We practiced a question where they had to approve access controls.
EL
Eladia
18 days ago
I think it's senior management, but I’m not entirely sure. I remember something about their role in risk management.