CRISC · Question #88
Which of the following is the MAIN purpose of monitoring risk?
The correct answer is A. Communication. The main purpose of monitoring risk is to gather current risk information and communicate it effectively to relevant stakeholders.
Question
Which of the following is the MAIN purpose of monitoring risk?
Options
- ACommunication
- BRisk analysis
- CDecision support
- DBenchmarking
How the community answered
(48 responses)- A92% (44)
- B2% (1)
- C4% (2)
- D2% (1)
Why each option
The main purpose of monitoring risk is to gather current risk information and communicate it effectively to relevant stakeholders.
The primary goal of risk monitoring is to continuously track the evolving risk landscape, assess the effectiveness of existing controls, and identify any new or changing risks. This information is then communicated to decision-makers and relevant parties, ensuring they are aware of the current risk posture and can make timely and informed decisions regarding risk treatment and management.
Risk analysis is a distinct step in the risk management process, occurring before monitoring, to assess the likelihood and impact of identified risks.
Decision support is a beneficial *outcome* of effective risk monitoring and communication, rather than the primary purpose of the monitoring activity itself.
Benchmarking involves comparing against standards or peers, which can be part of a broader risk management program, but it is not the main purpose of ongoing risk monitoring.
Concept tested: Risk monitoring, risk communication
Source: https://learn.microsoft.com/en-us/compliance/assurance/assurance-risk-assessment-reporting
Topics
Community Discussion
No community discussion yet for this question.