Who should be accountable for managing these risks?

During a new system implementation, an IS auditor has been assigned to review risk management at each milestone. The auditor finds that several risks to project benefits have not been addressed.

Who should be accountable for managing these risks?
A . Enterprise risk manager
B. Project sponsor
C. Information security officer
D. Project manager

View Answer

Answer: D