CRISC · Question #525
Which of the following provides the BEST evidence that robust risk management practices are in place within an organization?
The correct answer is C. A regularly updated risk register. A regularly updated risk register provides the best evidence of robust risk management practices by demonstrating ongoing risk identification, assessment, and monitoring.
Question
Which of the following provides the BEST evidence that robust risk management practices are in place within an organization?
Options
- AA management-approved risk dashboard
- BA current control framework
- CA regularly updated risk register
- DRegularly updated risk management procedures
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- C93% (27)
Why each option
A regularly updated risk register provides the best evidence of robust risk management practices by demonstrating ongoing risk identification, assessment, and monitoring.
A management-approved risk dashboard presents a snapshot of risks but doesn't necessarily show the ongoing, detailed processes of risk identification and treatment.
A current control framework defines the controls but doesn't provide evidence of their active application, monitoring, or the overall risk management process.
A regularly updated risk register is a living document that captures identified risks, their assessment (likelihood and impact), current status, assigned owners, and planned or implemented mitigation actions. Its consistent maintenance indicates that the organization is actively tracking and managing its risk landscape, reflecting a continuous and robust risk management process.
Regularly updated risk management procedures outline how risk should be managed, but a regularly updated risk register demonstrates that these procedures are actually being followed in practice.
Concept tested: Evidence of risk management maturity
Topics
Community Discussion
No community discussion yet for this question.