CGRC Practice Questions - ISC2 CGRC Certified In Governance, Risk And Compliance Exam

Access More Questions

According to NIST SP 800-37 Rev. 2, who is ultimately responsible for the security and privacy risks associated with an information system?

Chief Information Officer (CIO) Authorizing Official (AO) System Owner Senior Accountable Official for Risk Management

Correct Answer:

Senior Accountable Official for Risk Management

Access more questions from this quiz

Continue to CGRC Practice Questions - ISC2 CGRC Certified in Governance, Risk and Compliance Exam for more practice questions and the full quiz experience.

Access More Questions