Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CRISC Exam - Topic 5 Question 20 Discussion

The risk associated with a high-risk vulnerability in an application is owned by the:
B) business unit
A) security department.
C) vendor.
D) IT department.

Isaca CRISC Exam - Topic 5 Question 20 Discussion

Actual exam question for Isaca's CRISC exam
Question #: 20
Topic #: 5
[All CRISC Questions]

The risk associated with a high-risk vulnerability in an application is owned by the:

Show Suggested Answer Hide Answer
Suggested Answer: B

by Gilma at May 03, 2022, 06:04 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Simona
8 months ago
Hmm, I’m surprised it’s not the security department!
upvoted 0 times
...
Merlyn
9 months ago
Wait, are we sure it's not the vendor?
upvoted 0 times
...
Roxane
9 months ago
I thought it was the IT department's responsibility?
upvoted 0 times
...
Buck
9 months ago
Totally agree, the business unit should handle it!
upvoted 0 times
...
Burma
9 months ago
It's usually the business unit that owns the risk.
upvoted 0 times
...
Salina
9 months ago
This is tricky! I thought it was the IT department, but now I'm questioning if it should be the business unit instead.
upvoted 0 times
...
Ariel
9 months ago
I feel like the vendor might have some responsibility, but I lean towards the business unit owning the risk.
upvoted 0 times
...
Joseph
9 months ago
I remember a practice question where the security department was mentioned as the owner of risks. But that doesn't seem right for this one.
upvoted 0 times
...
Marcelle
9 months ago
I think the risk is usually owned by the business unit, but I'm not entirely sure. It feels like it could also be the IT department.
upvoted 0 times
...
Quentin
9 months ago
I think the answer is A. Waiting, since an idle resource is not being utilized and is essentially waiting to be used.
upvoted 0 times
...
Ryan
9 months ago
Got it, this is all about being thorough and careful with the change set. I'll make sure to add the permissions and access settings, and definitely run those validations in the sandbox first. Options B and C for me.
upvoted 0 times
...
Johnson
10 months ago
Hmm, I'm a bit confused by all the different transactions here. I'll need to review the rules on put options and how they impact taxes.
upvoted 0 times
...

Save Cancel