Who should the IT Risk Manager report to? A. Chief Information Officer (COO) B. Chief Financial Officer (CFO) C. Chief Risk Officer (CRO)

IT will be to Chief Risk Officer if such designation exists. Else it should be tagged to CIO

CRO if such a position exists, else he should report to CIO