A business unit is updating a risk register with assessment results for a key project. Which of the following is MOST important to capture in the register?

While knowing the methodology used for assessment is useful context, it is less critical than documenting the *actual plans* to manage the risks identified.

The primary purpose of a risk register is to manage risks, and this necessitates not only identifying them but also detailing how they will be addressed. Capturing action plans to treat risk scenarios ensures that mitigation strategies are clearly defined, assigned, and tracked, making the register an active tool for risk management rather than just a static list.

The date and status of the last project milestone are relevant for overall project management, but not the most critical piece of information for the *risk management* aspect captured in a risk register.

Identifying control owners is important for accountability, but the action plans themselves (what will be done) are more fundamental to risk treatment than just who owns a control.