Certified in Risk and Information Systems Control (CRISC) — Question 392

Management has implemented two new preventative controls to address a risk found in an audit. Following closure of the issue, which of the following is MOST important to update in the risk register?

Answer options

• A. Key controls
• B. Likelihood
• C. Inherent risk
• D. Impact

Correct answer: B

Explanation

Updating the 'Likelihood' in the risk register is essential as the new controls are intended to reduce the probability of the risk occurring. While 'Key controls', 'Inherent risk', and 'Impact' are also important, they do not directly reflect the changes made to the risk's probability of occurrence following the implementation of the new preventative controls.