Study. uk . com
  1. Home
  2. All questions
  3. Question 256

CISM study material · question 256 of 1000

IR 8286 distinguishes two roles attached to a register entry. Which pairing is correct?

  1. The risk owner is external and the risk manager internal
  2. The risk owner is accountable for the risk being managed to requirements; the risk manager handles day-to-day monitoring of the response
  3. The risk owner monitors daily; the risk manager is accountable
  4. Both terms describe the same role at different tiers
Show the answer

Answer: B. The risk owner is accountable for the risk being managed to requirements; the risk manager handles day-to-day monitoring of the response

IR 8286 describes the risk owner as the designated party responsible and accountable for ensuring the risk is maintained per enterprise requirements, who may work with a designated risk manager responsible for managing and monitoring the response.

Source: NIST IR 8286 (NIST) — Sec. 3 Risk Register Elements

Challenge yourself on this topic → Study as cards