MENU
The risk associated with a high-risk vulnerability in an application is owned by the:
Suggested Answer: B
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
SI
Simona
11 months ago
Hmm, I’m surprised it’s not the security department!
ME
Merlyn
12 months ago
Wait, are we sure it's not the vendor?
RO
Roxane
12 months ago
I thought it was the IT department's responsibility?
BU
Buck
12 months ago
Totally agree, the business unit should handle it!
BU
Burma
1 year ago
It's usually the business unit that owns the risk.
SA
Salina
1 year ago
This is tricky! I thought it was the IT department, but now I'm questioning if it should be the business unit instead.
AR
Ariel
1 year ago
I feel like the vendor might have some responsibility, but I lean towards the business unit owning the risk.
JO
Joseph
1 year ago
I remember a practice question where the security department was mentioned as the owner of risks. But that doesn't seem right for this one.
MA
Marcelle
1 year ago
I think the risk is usually owned by the business unit, but I'm not entirely sure. It feels like it could also be the IT department.
QU
Quentin
1 year ago
I think the answer is A. Waiting, since an idle resource is not being utilized and is essentially waiting to be used.
RY
Ryan
1 year ago
Got it, this is all about being thorough and careful with the change set. I'll make sure to add the permissions and access settings, and definitely run those validations in the sandbox first. Options B and C for me.
JO
Johnson
1 year ago
Hmm, I'm a bit confused by all the different transactions here. I'll need to review the rules on put options and how they impact taxes.