CRISC · Question #204
Reviewing which of the following BEST helps an organization gam insight into its overall risk profile''
The correct answer is A. Risk register. Reviewing an organization's risk register provides the best insight into its overall risk profile by detailing identified risks and their mitigation statuses.
Question
Reviewing which of the following BEST helps an organization gam insight into its overall risk profile''
Options
- ARisk register
- BRisk appetite
- CThreat landscape
- DRisk metrics
How the community answered
(22 responses)- A95% (21)
- B5% (1)
Why each option
Reviewing an organization's risk register provides the best insight into its overall risk profile by detailing identified risks and their mitigation statuses.
A risk register serves as a centralized, living document that catalogs all identified risks, their characteristics (likelihood, impact), current status, assigned ownership, and planned or existing mitigation strategies. Consulting it offers a comprehensive and dynamic view of an organization's entire risk landscape, directly reflecting its overall risk profile.
Risk appetite defines the level of risk an organization is willing to accept, but it does not detail the actual identified risks or their current status within the organization.
The threat landscape describes potential external and internal threats, but it does not encompass an organization's specific vulnerabilities, existing controls, or its overall, unique risk posture.
Risk metrics provide specific quantitative measurements of risk performance or control effectiveness, but they offer only segmented data points rather than the holistic overview provided by a detailed risk register.
Concept tested: Risk register for overall risk insight
Source: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/reference/azure-risk-register
Topics
Community Discussion
No community discussion yet for this question.