nerdexam
Isaca

CRISC · Question #486

Which of the following is the MOST important update for keeping the risk register current?

The correct answer is A. Modifying organizational structures when lines of business merge. Modifying organizational structures due to mergers is the most critical update for a risk register because it fundamentally alters the risk landscape, asset ownership, and operational context.

Submitted by tom_us· Apr 18, 2026Governance

Question

Which of the following is the MOST important update for keeping the risk register current?

Options

  • AModifying organizational structures when lines of business merge
  • BAdding new risk assessment results annually
  • CRetiring risk scenarios that have been avoided
  • DChanging risk owners due to employee turnover

How the community answered

(21 responses)
  • A
    71% (15)
  • B
    5% (1)
  • C
    14% (3)
  • D
    10% (2)

Why each option

Modifying organizational structures due to mergers is the most critical update for a risk register because it fundamentally alters the risk landscape, asset ownership, and operational context.

AModifying organizational structures when lines of business mergeCorrect

Merging lines of business or significant organizational structural changes profoundly impact the asset base, business processes, ownership, and interdependencies of risks, requiring a fundamental re-evaluation and update of the risk register. These changes can introduce new risks, modify existing ones, and shift accountability, necessitating a comprehensive review to maintain the register's accuracy and relevance.

BAdding new risk assessment results annually

Adding new risk assessment results annually is important for routine updates but less immediately impactful than a fundamental structural change like a merger.

CRetiring risk scenarios that have been avoided

Retiring risk scenarios that have been avoided is a cleanup activity and less critical than updating the register to reflect current operational realities.

DChanging risk owners due to employee turnover

Changing risk owners due to employee turnover is an administrative update to accountability but does not alter the underlying risk itself or its potential impact.

Concept tested: Risk register maintenance priorities

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-39.pdf

Topics

#Risk Register Management#Organizational Change Impact#Risk Context#Strategic Risk Management

Community Discussion

No community discussion yet for this question.

Full CRISC Practice