Certified in Risk and Information Systems Control (CRISC) — Question 1262

An organization is in the process of reviewing its risk appetite statement and re-defining the risk tolerance threshold. Which of the following elements of the risk register is MOST likely to change as a result of this review?

Answer options

• A. Risk impact
• B. Risk response
• C. Risk likelihood
• D. Risk ownership

Correct answer: B

Explanation

The risk response is directly influenced by the organization's risk appetite and tolerance levels. When these levels are redefined, the strategies to address risks may need to be updated accordingly. In contrast, risk impact, likelihood, and ownership are less likely to change directly as a result of adjustments to the risk appetite.