Certified in Risk and Information Systems Control (CRISC) — Question 41
When developing a new risk register, a risk practitioner should focus on which of the following risk management activities?
Answer options
- A. Risk response planning
- B. Risk identification
- C. Risk monitoring and control
- D. Risk management strategy planning
Correct answer: B
Explanation
The correct answer is B, as risk identification is the foundational step in developing a risk register, allowing the practitioner to recognize potential risks. The other options, while important in the overall risk management process, occur after risks have been identified and are not the primary focus at this stage.