Which statement best describes the role of IT staff in risk management?
OPTIONS
- IT risk management is a specialized skill and should be performed only by specially trained staff
- When IT services fail because of unidentified risk, responsible staff must be held accountable
- IT staff objectively identify potential risks in their own work
- IT staff are responsible for contributing to the effective management of risks
ANSWER
IT staff are responsible for contributing to the effective management of risks
EXPLANATION
All IT staff share responsibility for risk management. Everyone is responsible for participating in and contributing to risk management because there are potential risks in everyone’s actions. Actively managing risks should be habitual.
