CRISC · Question #486
Which of the following is the MOST important update for keeping the risk register current?
The correct answer is A. Modifying organizational structures when lines of business merge. Modifying organizational structures due to mergers is the most critical update for a risk register because it fundamentally alters the risk landscape, asset ownership, and operational context.
Question
Which of the following is the MOST important update for keeping the risk register current?
Options
- AModifying organizational structures when lines of business merge
- BAdding new risk assessment results annually
- CRetiring risk scenarios that have been avoided
- DChanging risk owners due to employee turnover
How the community answered
(21 responses)- A71% (15)
- B5% (1)
- C14% (3)
- D10% (2)
Why each option
Modifying organizational structures due to mergers is the most critical update for a risk register because it fundamentally alters the risk landscape, asset ownership, and operational context.
Merging lines of business or significant organizational structural changes profoundly impact the asset base, business processes, ownership, and interdependencies of risks, requiring a fundamental re-evaluation and update of the risk register. These changes can introduce new risks, modify existing ones, and shift accountability, necessitating a comprehensive review to maintain the register's accuracy and relevance.
Adding new risk assessment results annually is important for routine updates but less immediately impactful than a fundamental structural change like a merger.
Retiring risk scenarios that have been avoided is a cleanup activity and less critical than updating the register to reflect current operational realities.
Changing risk owners due to employee turnover is an administrative update to accountability but does not alter the underlying risk itself or its potential impact.
Concept tested: Risk register maintenance priorities
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-39.pdf
Topics
Community Discussion
No community discussion yet for this question.