Who should be accountable for managing these risks?

exams CISA V1 CISA exam 0 Comments

During a new system implementation, an IS auditor has been assigned to review risk management at each milestone. The auditor finds that several risks to project benefits have not been addressed.

Who should be accountable for managing these risks?
A . Enterprise risk manager
B. Project sponsor
C. Information security officer
D. Project manager

Answer: D