Which of the following is a component of a risk register?

The correct answer is A. Key risk indicators. A risk register is a catalog of identified risks and their details; for each entry you track signals that a risk is materializing. Those measurable signals are key risk indicators (KRIs) - thresholds or metrics (e.g., failed logins/day, patch backlog age) tied to a specific…

Submitted by manish99· Mar 6, 2026Security program management and oversight

Question

Options

AKey risk indicators
BContinuous risk assessment
CRisk appetite
DRisk culture

How the community answered

(42 responses)

A
88% (37)
B
5% (2)
C
5% (2)
D
2% (1)

Explanation

A risk register is a catalog of identified risks and their details; for each entry you track signals that a risk is materializing. Those measurable signals are key risk indicators (KRIs) - thresholds or metrics (e.g., failed logins/day, patch backlog age) tied to a specific risk so you can spot escalation early and trigger the planned response. Continuous assessment, appetite, and culture are program-level concepts, not individual register fields.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice