CRISC · Question #195
Which of the following is the MOST important consideration for effectively maintaining a risk register?
The correct answer is B. The register is updated frequently. For a risk register to be effective, its most important consideration is frequent updates, ensuring it accurately reflects the dynamic risk landscape.
Question
Which of the following is the MOST important consideration for effectively maintaining a risk register?
Options
- AAn IT owner is assigned for each risk scenario.
- BThe register is updated frequently.
- CThe register is shared with executive management.
- DCompensating controls are identified.
How the community answered
(63 responses)- A3% (2)
- B94% (59)
- C2% (1)
- D2% (1)
Why each option
For a risk register to be effective, its most important consideration is frequent updates, ensuring it accurately reflects the dynamic risk landscape.
Assigning an IT owner is important for accountability and action, but it's a detail of risk management, not the most critical factor for the register's overall accuracy and effectiveness.
The business environment, threats, and vulnerabilities are constantly changing, making frequent updates essential for a risk register to remain relevant, accurate, and a reliable tool for decision-making regarding the organization's current risk posture.
Sharing the register with executive management is crucial for communication, but the register must first be accurate and current to be useful for informing executive decisions.
Identifying compensating controls contributes to the completeness of risk treatment planning within the register, but the fundamental requirement for an effective register is its ongoing currency.
Concept tested: Risk register maintenance
Topics
Community Discussion
No community discussion yet for this question.