nerdexam
Isaca

CRISC · Question #88

Which of the following is the MAIN purpose of monitoring risk?

The correct answer is A. Communication. The main purpose of monitoring risk is to gather current risk information and communicate it effectively to relevant stakeholders.

Submitted by kev92· Apr 18, 2026Risk Response and Reporting

Question

Which of the following is the MAIN purpose of monitoring risk?

Options

  • ACommunication
  • BRisk analysis
  • CDecision support
  • DBenchmarking

How the community answered

(48 responses)
  • A
    92% (44)
  • B
    2% (1)
  • C
    4% (2)
  • D
    2% (1)

Why each option

The main purpose of monitoring risk is to gather current risk information and communicate it effectively to relevant stakeholders.

ACommunicationCorrect

The primary goal of risk monitoring is to continuously track the evolving risk landscape, assess the effectiveness of existing controls, and identify any new or changing risks. This information is then communicated to decision-makers and relevant parties, ensuring they are aware of the current risk posture and can make timely and informed decisions regarding risk treatment and management.

BRisk analysis

Risk analysis is a distinct step in the risk management process, occurring before monitoring, to assess the likelihood and impact of identified risks.

CDecision support

Decision support is a beneficial *outcome* of effective risk monitoring and communication, rather than the primary purpose of the monitoring activity itself.

DBenchmarking

Benchmarking involves comparing against standards or peers, which can be part of a broader risk management program, but it is not the main purpose of ongoing risk monitoring.

Concept tested: Risk monitoring, risk communication

Source: https://learn.microsoft.com/en-us/compliance/assurance/assurance-risk-assessment-reporting

Topics

#Risk Monitoring#Risk Communication#Risk Management Process#Stakeholder Reporting

Community Discussion

No community discussion yet for this question.

Full CRISC Practice