Study. uk . com
  1. Home
  2. All questions
  3. Question 71

CISM study material · question 71 of 1000

Stakeholders in a risk process repeatedly disagree over who decides and who merely comments. Which tool does IR 8286 suggest to settle this?

  1. An organisation chart approved by the board
  2. A RACI chart recording who is responsible, accountable, consulted and informed
  3. A risk register with an owner column
  4. A service level agreement with each stakeholder
Show the answer

Answer: B. A RACI chart recording who is responsible, accountable, consulted and informed

IR 8286 suggests documenting responsibilities as a RACI chart that designates which roles are responsible, accountable, consulted or informed about the various risk management activities.

Source: NIST IR 8286 (NIST) — Sec. 3.1.1 Notional Risk Management Roles

Challenge yourself on this topic → Study as cards