Exam CRISC topic 1 question 890 discussion

I go with B. Easy to understand. Risk Treatment plan is an Action plan, how to TREAT the risk. Accept? Transfer? Avoid? So who is doing it, own it, is the most important. B. Date is important. But it is the most important. If you have Date but no owner. Who is doing it? But if you have Owner with no date. Then you can go to ask the Owner. So not A. Also Not C. Justification is the same. In the plan, justification, is not help for you to do the action. If you want to know the justification, go to find the owner.

ownerrrrr.... knows the best! :)

Going with B. Without an owner, there's no accountability and the plan may never be completed.

I think c is best option here. This is important as it helps in determining the effectiveness of the selected risk treatment option and its alignment with organizational objectives.

Treatment plan justification is the MOST important component in a risk treatment plan. The justification should explain the reasons for selecting a particular risk treatment option, such as the cost-benefit analysis, feasibility, and alignment with the organization's risk appetite and objectives. This information is crucial in obtaining approval from stakeholders and ensuring that resources are allocated appropriately to implement the risk treatment plan. Treatment plan ownership is also important, but it is not the most critical component, as the success of the treatment plan depends on the justification and support from stakeholders.

I will go with B, the owner has the authority to decide the date and decide the treatment option. But without an owner who will take the call here?

I would like to go with B , most important than any other

I think answer A , Risk treatment plan should be run as a project with definite start data and end date. End date help to decide critical path of critical path of project if no dates, then project will never finish.

I'm inclined to go with C, Treatment plan justification.. sounds like CBA B on the other hand Treatment plan owership. if it's owned by someone else besides the Risk Owner.... (I don't know if that's an option).

why not B detailed information on the risk response (e.g., action owner and the risk response status, time frame for action, related projects, and risk tolerance level). These components can also be defined as the risk universe.