MENU
An organization has contracted with a cloud service provider to support the deployment of a new product. Of the following, who should own the associated risk?
Suggested Answer: D
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
AL
Alyce
10 months ago
Really? I’m surprised it’s not the head of enterprise architecture.
LA
Laurel
10 months ago
The information security manager has a big role here too.
SH
Shaun
10 months ago
I think the IT risk manager should own the risk.
GR
Gracia
10 months ago
Wait, shouldn’t the product owner be responsible?
GE
Gerry
10 months ago
Totally agree, they’re the ones focused on risk!
CE
Celestine
11 months ago
This is tricky! I feel like the product owner should own the risk since they are ultimately responsible for the product's success, but I could be wrong.
OL
Olive
11 months ago
I'm leaning towards the information security manager, but I feel like the head of enterprise architecture could also have a stake in it.
AM
Amber
11 months ago
I remember a practice question where the product owner was responsible for risks related to product delivery. Could that apply here too?
CL
Claudio
11 months ago
I think the IT risk manager might be the right choice since they typically handle risk assessments, but I'm not entirely sure.
VA
Valentin
11 months ago
The product owner seems like the logical choice to me. They're accountable for the success of the new product, so they should own the associated risks.
CA
Carla
12 months ago
I'm a bit confused on this one. I'll need to review the responsibilities of each role to decide who should own the risk.
VO
Vonda
12 months ago
I think the head of enterprise architecture might be a good choice here, since they have the big-picture view of the organization's technology landscape and can assess the overall risk.
JO
Josphine
12 months ago
Hmm, I'm not sure about this one. The IT risk manager or information security manager could also be responsible for managing the cloud service provider risks.
IV
Ivan
1 year ago
This one seems straightforward - the product owner should own the risk since they're responsible for the new product deployment.
SY
Sylvie
1 year ago
Haha, good one Phil! But seriously, I'm with Candida on this one. The product owner has the most skin in the game, so they should be calling the shots.
PH
Phil
1 year ago
Hold up, did someone say 'cloud'? I heard that's where all the hackers hang out these days. Better call in the ghostbusters!
TO
Tom
1 year ago
This is a tough one, but I think the head of enterprise architecture should be in charge. They're the ones who oversee the whole system, so they're best equipped to handle the risk.
MA
Mari
1 year ago
The information security manager should be the one in charge. They are experts in protecting data and systems from potential threats.
SH
Shawn
1 year ago
I think the IT risk manager should be responsible. They specialize in managing and mitigating risks in IT systems.
GI
Gianna
1 year ago
I agree, the head of enterprise architecture should definitely own the risk. They have the big picture view.
CA
Carylon
1 year ago
Hmm, I'm not so sure. The information security manager might be a better fit, since they're the ones who have to make sure the cloud service is secure.
DO
Dorcas
1 year ago
I'd say the IT risk manager. They're the ones who should be on top of all the potential risks, right?
SH
Shawnna
1 year ago
B) The IT risk manager
NA
Nada
1 year ago
A) The head of enterprise architecture (EA)
CA
Candida
1 year ago
The product owner should own the associated risk. They're responsible for the product's success, after all.
HY
Hyun
1 year ago
I agree, they are responsible for the product's success.
HY
Hyun
1 year ago
The product owner should own the associated risk.
HU
Huey
1 year ago
But shouldn't the product owner be the one to own the risk since it's their product?
ME
Meghann
1 year ago
I disagree, I believe the information security manager should be responsible.
HU
Huey
1 year ago
I think the IT risk manager should own the risk.