nerdexam
(ISC)2

CISSP · Question #1037

What are the essential elements of a Risk Assessment Report (RAR)?

The correct answer is D. Executive summary, body of the report, and appendices. Risk Assessment Report (RAR) Essential Elements Option D is correct because a Risk Assessment Report follows standard professional report structure: an Executive Summary (high-level overview for decision-makers), the Body of the Report (detailed findings, analysis, and…

Submitted by minji_kr· Mar 5, 2026Security and Risk Management

Question

What are the essential elements of a Risk Assessment Report (RAR)?

Options

  • ATable of contents, testing criteria, and index
  • BTable of contents, chapters, and executive summary
  • CExecutive summary, graph of risks, and process
  • DExecutive summary, body of the report, and appendices

How the community answered

(49 responses)
  • A
    4% (2)
  • C
    2% (1)
  • D
    94% (46)

Explanation

Risk Assessment Report (RAR) Essential Elements

Option D is correct because a Risk Assessment Report follows standard professional report structure: an Executive Summary (high-level overview for decision-makers), the Body of the Report (detailed findings, analysis, and recommendations), and Appendices (supporting data, references, and supplementary material) - together forming a complete, functional document.

  • Option A is incorrect because while a table of contents and index are organizational tools that may appear within a report, "testing criteria" is not a core structural element of a RAR.
  • Option B is incorrect because chapters are simply subdivisions of the body, not a standalone essential element, making this description incomplete and imprecise.
  • Option C is incorrect because a "graph of risks" is a visual aid that may appear within a RAR but is not a fundamental structural component - and "process" is too vague to define a core element.

Memory Tip: Think "E-B-A" - Every Business Assessment needs an Executive summary, Body, and Appendices. These mirror the universal structure of any professional report, so if you remember how reports are built generally, you'll always identify the correct RAR structure.

Topics

#Risk Assessment Report#Report structure#Documentation

Community Discussion

No community discussion yet for this question.

Full CISSP Practice