Certified in Risk and Information Systems Control (CRISC) — Question 244

The MAIN reason for creating and maintaining a risk register is to:

Answer options

• A. account for identified key risk factors.
• B. ensure assets have low residual risk.
• C. define the risk assessment methodology.
• D. assess effectiveness of different projects.

Correct answer: A

Explanation

The correct answer is A because a risk register serves to document and track key risk factors that have been identified. The other options, while related to risk management, do not capture the main function of a risk register which is focused on the identification and accounting of risks.