Question about Business Unit - I am not sure about the answer.

Morgi0noCativo

I did found this:

But nothing with this specific scenario.
Could someone help me understand the question?

bu.jpg

Business Unit.jpg

Find more posts tagged with

SAVE $250 on Your CompTIA Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View CompTIA Boot Camps

Comments

jcundiff

the 2nd option is correct... BU owns the risk as well as the other parts of the answer... they would report their progress/ lack thereof to the companies Risk Management team (if one exists) and up the chain of command to the board

Board and Executive management define risk appetite and what level of risk is acceptable to the organization

jcundiff

For additional Risk Management questions, you may want to visit the ISACA forums here, which would include the CRISC certification and questions and answers regarding risk management

Morgi0noCativo

Thank you

jcundiff wrote: »

For additional Risk Management questions, you may want to visit the ISACA forums here, which would include the CRISC certification and questions and answers regarding risk management