Certified in Risk and Information Systems Control (CRISC) — Question 1336

Which of the following events is MOST likely to trigger an update to the risk register?

Answer options

• A. A reminder to reassess an identified risk has been sent to risk owners and risk custodians.
• B. A business case for implementing a new solution for automating controls has been proposed.
• C. A project to implement a risk response action plan has been completed and closed successfully.
• D. A post-implementation review of a new application has been initiated by senior management.

Correct answer: C

Explanation

The correct answer is C because completing and closing a project that implements a risk response action plan indicates that the associated risks have been addressed, necessitating an update to the risk register. Options A and D involve evaluations or reviews that do not directly result in changes to the risk status, while B is merely a proposal and does not indicate any completed actions or changes in risk management.