Exam CRISC topic 1 question 704 discussion

See CRISC review manual page 100 section 2.8.2: The answer is B.

The risk practitioner can be consulted but ultimate , risk owner make decisions on risk mitigation options. support B

B. The risk owner. The risk owner is typically in the best position to select the appropriate risk treatment option. The risk owner is the individual or entity responsible for managing and mitigating a specific risk. They have a deep understanding of the risk, its potential impact, and the available resources and strategies to address it. Therefore, they are best suited to make informed decisions about how to treat the risk. While other individuals or roles, such as the risk practitioner, control owner, and business process owner, may provide valuable input and recommendations, the final decision on the risk treatment option should rest with the risk owner, as they bear the primary responsibility for the risk's management and its outcomes.

Agree it is B.

Agree.

The risk owner is in the best position to select the appropriate risk treatment option because they have a clear understanding of the risk and its potential impact on the organization. They are also responsible for managing the risk and have the authority to make decisions on how to treat it.

B: It is certainly the Risk owner who selects the response options. (Never the risk practitioner) God only knows who the clowns are who answered these qustions.

I am not sure. Risk owner owns the risk and makes sure risk is mitigated. But I am not sure if risk owner decides about risk mitigation options

Risk Owner would be the approriate answer as Risk Owner makes decisions on risk related as what ISACA prescripted.

I thought a risk practitioner could only assess, advise and report?