Isaca Exam CRISC Topic 3 Question 57 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 57
Topic #: 3

An IT department has provided a shared drive for personnel to store information to which all employees have access. Which of the following parties is accountable for the risk of potential loss of confidential information?

ARisk manager

BData owner

CEnd user

DIT department

Show Suggested Answer

Suggested Answer: D

by Garry at Jan 07, 2023, 10:14 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gladys

2 months ago

The end user has to be accountable, right? They're the ones actually putting the data on the shared drive. How hard is it to read a few security guidelines?

upvoted 0 times

Beth

1 months ago

It's important for all employees to understand the risks and responsibilities when using the shared drive.

upvoted 0 times

...

Slyvia

1 months ago

Yes, end users should take accountability for their actions when storing data on the shared drive.

upvoted 0 times

...

Earlean

1 months ago

End users are responsible for following security guidelines to prevent loss of confidential information.

upvoted 0 times

...

Dierdre

2 months ago

Wait, are we sure there's even any confidential information on this shared drive? Maybe the employees are just storing their cat photos and recipes. You know how that goes...

upvoted 0 times

...

Tijuana

2 months ago

I'm not so sure. The IT department is the one providing the shared drive, so they have a duty to ensure it's secure. This one's on them, in my opinion.

upvoted 0 times

Hollis

1 days ago

Employees should also be responsible for ensuring they are storing information securely on the shared drive.

upvoted 0 times

...

An

3 days ago

IT department should definitely be accountable for the risk of potential loss of confidential information.

upvoted 0 times

...

Caprice

6 days ago

True, it's a shared responsibility between the IT department and the employees to ensure data security.

upvoted 0 times

...

Doyle

25 days ago

Yes, employees should also be accountable for how they handle and store confidential information.

upvoted 0 times

...

Mitsue

2 months ago

But what about the employees who have access to the shared drive? Shouldn't they also be responsible?

upvoted 0 times

...

In

2 months ago

IT department should be accountable for the risk of potential loss of confidential information.

upvoted 0 times

...

Donte

2 months ago

But shouldn't the IT department also be accountable for ensuring the security of the shared drive?

upvoted 0 times

...

Arthur

2 months ago

The data owner is definitely responsible here. They should have set up proper access controls and data classification policies to protect sensitive information.

upvoted 0 times