CRISC Risk Response and Reporting Practice Question
An organization has implemented a new control that requires manual approval for all high-value transactions. The control owner is responsible for ensuring approvals are obtained. Which control ownership aspect is demonstrated?
⚠ Common exam trap
Many candidates confuse 'control ownership' with 'control implementation' or 'resource allocation,' but the question specifically tests the distinction between accountability for ongoing operation versus planning or resourcing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Control ownership
The scenario explicitly states that the control owner is responsible for ensuring approvals are obtained, which directly demonstrates the concept of control ownership. Control ownership refers to the assignment of accountability for the implementation, operation, and maintenance of a specific control, such as manual approval for high-value transactions. This is a core principle in risk response, where a named individual is accountable for the control's effectiveness, not just its implementation or cost.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Control implementation plan
Why it's wrong here
The plan outlines steps, but ownership is about accountability.
- ✗
Cost-benefit analysis
Why it's wrong here
Cost-benefit is separate from ownership.
- ✓
Control ownership
Why this is correct
The control owner is accountable for the control's operation and effectiveness.
- ✗
Resource requirements
Why it's wrong here
Resources are needed but ownership is about responsibility.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.