nerdexam
(ISC)2

CGRC · Question #460

Risks with low ratings of probability and impact are included on a ____ for future monitoring. Response:

The correct answer is A. Watchlist. The question describes low-probability, low-impact risks that are not immediately addressed but are kept under review, and asks for the term used to categorize them.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Risks with low ratings of probability and impact are included on a ____ for future monitoring. Response:

Options

  • AWatchlist
  • BRisk alarm
  • CObservation list
  • DRisk register

How the community answered

(38 responses)
  • A
    87% (33)
  • B
    8% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

The question describes low-probability, low-impact risks that are not immediately addressed but are kept under review, and asks for the term used to categorize them.

AWatchlistCorrect

A watchlist is a list of items, in this context risks, that are identified as having low probability and/or low impact, and are therefore not prioritized for immediate mitigation but are kept for future monitoring and periodic review. This allows organizations to be aware of potential issues without expending resources on unlikely events.

BRisk alarm

“Risk alarm” is not a standard term in risk management frameworks for classifying low-priority risks; an alarm implies immediate attention.

CObservation list

“Observation list” is a plausible term, but "watchlist" is the more commonly accepted and formalized term in risk management for this purpose.

DRisk register

A risk register is a comprehensive document that lists all identified risks, including those being mitigated and those accepted, but a "watchlist" specifically denotes risks requiring only monitoring due to their low priority.

Concept tested: Risk Management Watchlist

Topics

#Risk Management#Risk Monitoring#Watchlist#Low Impact Risks

Community Discussion

No community discussion yet for this question.

Full CGRC Practice