A recent risk workshop has identified risk owners and responses for newly identified risk scenarios. Which of the following should be the risk practitioner s NEXT step? r

Preparing a business case for response options would typically occur *before* or *during* the selection of a response, or it might be a subsequent step once the response is formally documented.

Identifying resources for implementing responses is an important step *after* the responses are formally documented and approved, as part of the execution phase.

Developing a mechanism for monitoring residual risk is crucial, but it follows the formal documentation and implementation of risk responses, as it assesses the risk remaining *after* controls are in place.

The risk register is the central repository for all identified risks, their owners, assessments, and planned responses; updating it ensures that the new information from the workshop is formally recorded, tracked, and communicated to relevant stakeholders as part of the ongoing risk management process.