Escalation

Term
Escalation
Exam
CISA & CISM
Definition

Referring an issue to a higher level of authority for decision or action.

Explained

Escalation refers a decision or issue to someone with the authority to resolve it — the risk owner, senior management or the audit committee. It is the right move when something exceeds your authority or the organization's risk appetite.

In practice

A risk beyond the manager's authority is referred to the risk committee for decision.

Often confused with
Notification
Exam angle

Often the right answer when something exceeds your authority or the risk appetite.

Related

Risk appetite · Information security governance

More from Glossary