hardMultiple Choice
CISA Practice Question: In a RACI matrix for the change management…
In a RACI matrix for the change management process, who is typically Accountable for the overall change process?
⚠ Common exam trap
CISA often tests the distinction between Accountable (single owner who answers for the outcome) and Responsible (the doer), so candidates who equate 'who does the work' with 'who is accountable' pick the requester or system owner.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The change manager
In a RACI matrix, the Accountable party is the single individual who ultimately owns the outcome and answers for the process end-to-end. For change management, that role is the change manager, who owns the change process, chairs the change advisory board (CAB), and is answerable for whether changes are properly assessed, approved, and implemented. The change requester and system owner are typically Responsible or Consulted, not Accountable for the overall process.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The change requester
Why it's wrong here
The requester raises the change and supplies justification, but accountability for the overall process sits with the change manager or change advisory board, who own approval, scheduling and outcomes. Requesters are only consulted or informed. Assigning them accountability removes the independent oversight that separates request initiation from authorisation.
- ✗
The system owner
Why it's wrong here
The system owner is accountable for a specific system's controls and availability, not the enterprise-wide change process. It is tempting because owners do approve changes affecting their systems, and that would be correct if the question asked who is accountable for a single system's changes.
- ✓
The change manager
Why this is correct
The change manager owns the end-to-end change process, answering for its design, compliance and outcomes, while others are consulted or informed. This satisfies the stem's accountability requirement, since RACI accountability rests with the single role answerable for the process.
- ✗
The IT director
Why it's wrong here
The IT director holds senior management oversight of technology operations, but accountability for the change process itself sits with the change manager who owns and operates it. It is tempting because directors sponsor change initiatives, and that would be correct if the question asked who provides executive sponsorship.
Go deeper
Related to this question
About these practice questions
One of 934 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISACA exam blueprint
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.