Which term describes the framework used to map and assign roles and responsibilities for processes?

Prepare for the ISACA IT Risk Fundamentals Test. Find flashcards and multiple choice questions, complete with hints and explanations. Ace your exam with confidence!

Multiple Choice

Which term describes the framework used to map and assign roles and responsibilities for processes?

Explanation:
The framework used to map and assign roles and responsibilities for processes is the RACI model. It defines four role types: Responsible—the person who actually performs the activity; Accountable—the owner who signs off on the work and has ultimate responsibility; Consulted—people who provide input and are engaged in two-way communication; and Informed—those who are kept updated about the progress. This setup makes ownership clear, reduces ambiguity about who does what, and helps prevent gaps or duplicative work as a process moves forward. A RACI chart is the actual matrix you’d create to document these assignments for each activity, but the underlying framework guiding those assignments is the RACI model. In contrast, governance refers to the broader system of oversight and policies, and a control objective is a target outcome a control aims to achieve, neither of which specifies how to allocate tasks. For example, in change management, the Initiator might be Responsible, the Change Manager Accountable, IT Security and QA Consulted, and stakeholders Informed.

The framework used to map and assign roles and responsibilities for processes is the RACI model. It defines four role types: Responsible—the person who actually performs the activity; Accountable—the owner who signs off on the work and has ultimate responsibility; Consulted—people who provide input and are engaged in two-way communication; and Informed—those who are kept updated about the progress. This setup makes ownership clear, reduces ambiguity about who does what, and helps prevent gaps or duplicative work as a process moves forward. A RACI chart is the actual matrix you’d create to document these assignments for each activity, but the underlying framework guiding those assignments is the RACI model. In contrast, governance refers to the broader system of oversight and policies, and a control objective is a target outcome a control aims to achieve, neither of which specifies how to allocate tasks. For example, in change management, the Initiator might be Responsible, the Change Manager Accountable, IT Security and QA Consulted, and stakeholders Informed.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy