Certified in Risk and Information Systems Control (CRISC) — Question 1346

Stephen is the project manager of the GBB project. He has worked with two subject matter experts and his project team to complete the risk assessment technique. There are approximately 47 risks that have a low probability and a low impact on the project. Which of the following answers best describes what
Stephen should do with these risk events?

Answer options

• A. Because they are low probability and low impact, Stephen should accept the risks.
• B. The low probability and low impact risks should be added to a watchlist for future monitoring.
• C. Because they are low probability and low impact, the risks can be dismissed.
• D. The low probability and low impact risks should be added to the risk register.

Correct answer: B

Explanation

The correct answer is B because monitoring low probability and low impact risks on a watchlist allows for ongoing awareness without immediate action. Answer A is incorrect as accepting these risks does not involve any proactive management. Answer C is wrong because dismissing risks may overlook potential changes in their status. Answer D is not ideal as adding them to the risk register does not facilitate monitoring.