nerdexam
Isaca

CRISC · Question #303

Which of the following is the GREATEST benefit of updating the risk register to include outcomes from a risk assessment?

The correct answer is B. It facilitates timely risk-based decisions.. Updating the risk register with risk assessment outcomes primarily facilitates timely and informed risk-based decisions by providing an up-to-date and comprehensive view of the organization's risk landscape.

Submitted by hassan_iq· Apr 18, 2026Risk Response and Reporting

Question

Which of the following is the GREATEST benefit of updating the risk register to include outcomes from a risk assessment?

Options

  • AIt maintains evidence of compliance with risk policy.
  • BIt facilitates timely risk-based decisions.
  • CIt validates the organization's risk appetite.
  • DIt helps to mitigate internal and external risk factors.

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    71% (12)
  • C
    6% (1)
  • D
    18% (3)

Why each option

Updating the risk register with risk assessment outcomes primarily facilitates timely and informed risk-based decisions by providing an up-to-date and comprehensive view of the organization's risk landscape.

AIt maintains evidence of compliance with risk policy.

While an updated risk register contributes to compliance evidence, its greatest benefit is not solely compliance but decision-making effectiveness.

BIt facilitates timely risk-based decisions.Correct

An updated risk register provides current and accurate information about identified risks, their likelihood, impact, and existing controls. This enables management to make informed and timely decisions regarding risk treatment, resource allocation, and strategic planning based on the latest risk posture.

CIt validates the organization's risk appetite.

Updating the risk register reflects the current risk profile, but it does not directly validate the organization's risk appetite; risk appetite is a separate strategic declaration.

DIt helps to mitigate internal and external risk factors.

Updating the risk register documents risks and assessments, which informs mitigation efforts, but the act of updating itself doesn't directly mitigate risks; it enables mitigation decisions.

Concept tested: Purpose of risk register updates

Source: https://www.isaca.org/resources/isaca-journal/issues/2012/volume-3/how-to-build-a-risk-register-a-framework-for-managing-risks

Topics

#Risk Register#Risk Assessment Outcomes#Decision Support#Risk Management Process

Community Discussion

No community discussion yet for this question.

Full CRISC Practice