Which of the following is the PRIMARY purpose of a risk register?

While a risk register may *document* control ownership, its primary purpose is not to *assign* it, but rather to record the assignments alongside other risk details.

A risk register serves as a central document or database that systematically records, tracks, and monitors all identified risks within an organization. This centralized view provides a comprehensive and current overview of the organization's risk landscape, which is essential for informed decision-making, reporting, and demonstrating due diligence in risk management.

Identifying opportunities to transfer risk is a component of risk treatment, which would be documented in a risk register, but it's not the register's overarching primary purpose.

A risk register helps *manage* risk by providing information, but it does not directly *mitigate* risk; mitigation is an action performed based on the information contained within the register.