Which of the following is the PRIMARY responsibility of a control owner?
A.
To make risk-based decisions and own losses
B.
To ensure implemented controls mitigate risk
C.
To approve deviations from controls
D.
To design controls that will eliminate risk
The Answer Is:
B
This question includes an explanation.
Explanation:
A control owner's primary responsibility is to ensure that the controls under their purview are effectively implemented and functioning as intended to mitigate associated risks. This involves regular monitoring, evaluation, and reporting on the performance of controls to maintain the organization's risk posture within acceptable limits.