After undertaking a risk assessment of a production system, the MOST appropriate action is for the risk manager to:

A. inform the IT manager of the concerns and propose measures to reduce them

B. inform the process owner of the concerns and propose measures to reduce them

C. inform the development team of the concerns, and together formulate risk reduction measures

D. recommend a program that minimizes the concerns of that production system








 

Suggested Answer: B



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.