crisc question 1021 discussion

View all Certified in Risk and Information Systems Control here
back to isaca forum

Question 1021 Topic 4

Topic 4
To mitigate the risk of using a spreadsheet lo analyze financial data. IT has engaged a third-party vendor to deploy a
standard application to automate the process. Which of the following parties should own the risk associated with calculation
errors?

  • A. Third-party provider
  • B. Business owner
  • C. IT department
  • D. Risk manager
Answer:

A

User Votes:
A 1 votes
50%
B 3 votes
50%
C
50%
D 1 votes
50%
Discussions
0 / 1000
lostwisdom81
6 months, 2 weeks ago

I believe business owner is ultimately responsible for the data