Who should be responsible for evaluating the residual risk after a compensating control has been applied?

A. Risk practitioner

B. Compliance manager

C. Risk owner

D. Control owner








 

Suggested Answer: C



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.