CRISC · Question #303
Which of the following is the GREATEST benefit of updating the risk register to include outcomes from a risk assessment?
The correct answer is B. It facilitates timely risk-based decisions.. Updating the risk register with risk assessment outcomes primarily facilitates timely and informed risk-based decisions by providing an up-to-date and comprehensive view of the organization's risk landscape.
Question
Which of the following is the GREATEST benefit of updating the risk register to include outcomes from a risk assessment?
Options
- AIt maintains evidence of compliance with risk policy.
- BIt facilitates timely risk-based decisions.
- CIt validates the organization's risk appetite.
- DIt helps to mitigate internal and external risk factors.
How the community answered
(17 responses)- A6% (1)
- B71% (12)
- C6% (1)
- D18% (3)
Why each option
Updating the risk register with risk assessment outcomes primarily facilitates timely and informed risk-based decisions by providing an up-to-date and comprehensive view of the organization's risk landscape.
While an updated risk register contributes to compliance evidence, its greatest benefit is not solely compliance but decision-making effectiveness.
An updated risk register provides current and accurate information about identified risks, their likelihood, impact, and existing controls. This enables management to make informed and timely decisions regarding risk treatment, resource allocation, and strategic planning based on the latest risk posture.
Updating the risk register reflects the current risk profile, but it does not directly validate the organization's risk appetite; risk appetite is a separate strategic declaration.
Updating the risk register documents risks and assessments, which informs mitigation efforts, but the act of updating itself doesn't directly mitigate risks; it enables mitigation decisions.
Concept tested: Purpose of risk register updates
Source: https://www.isaca.org/resources/isaca-journal/issues/2012/volume-3/how-to-build-a-risk-register-a-framework-for-managing-risks
Topics
Community Discussion
No community discussion yet for this question.