Explanation/Reference:
Explanation:
To ensure greater buy-in and ownership, risk indicators should be selected with the involvement of relevant stakeholders. Risk indicators should be identified for all stakeholders and should not focus solely on the more operational or strategic side of risk.
Incorrect Answers:
A: Role of lag indicators is to ensure that risk after events have occurred is being indicated.
B: Lead indicators indicate which capabilities are in place to prevent events from occurring. They do not play any role in ensuring greater buy-in and ownership.
C: Root cause is considered while selecting risk indicator but it does not ensure greater buy-in or ownership.

Section: Volume A
Explanation:
The basic purpose of Information System control in an organization is to ensure that the business objectives are achieved and undesired risk events are detected and corrected. Some of the IS control objectives are given below:
* Safeguarding assets
* Assuring integrity of sensitive and critical application system environments
* Assuring integrity of general operating system
* Ensuring effective and efficient operations
* Fulfilling user requirements, organizational policies and procedures, and applicable laws and regulations
* Changing management
* Developing business continuity and disaster recovery plans
* Developing incident response and handling plans
Hence the most important objective is to ensure that business objectives are achieved and undesired risk events are detected and corrected.
Incorrect Answers:
B, C, D: These are also the objectives of the information system control but are not the best answer.