Certified in Risk and Information Systems Control (CRISC) — Question 1288

The MAIN reason to use the risk register to monitor aggregated risk is to provide:

Answer options

• A. insight on control gaps.
• B. a basis for risk management resource allocation.
• C. a comprehensive view of risk impact.
• D. historical information about risk impact.

Correct answer: C

Explanation

The correct answer is C because the risk register provides a comprehensive view of all identified risks and their potential impacts, which is essential for effective risk management. While options A, B, and D provide valuable information, they do not encapsulate the overarching purpose of the risk register as effectively as option C.