ISACA Exam Questions

Who should drive the risk analysis for an organization?

Who should drive the risk analysis for an organization?

A.
Senior management

B.
Security manager

C.
Quality manager

D.
Legal department

Explanation:

Although senior management should support and sponsor a risk analysis, the know-how and the management of the project will be with the security department. Quality management and the legal department will contribute to the project.