Certified in Risk and Information Systems Control (CRISC) — Question 556

Reviewing which of the following BEST helps an organization gain insight into its overall risk profile?

Answer options

• A. Threat landscape
• B. Risk metrics
• C. Risk appetite
• D. Risk register

Correct answer: D

Explanation

The Risk register is a crucial tool that documents all identified risks, their analysis, and response strategies, thereby giving a comprehensive view of the organization's risk landscape. In contrast, the Threat landscape focuses on external threats, Risk metrics provide quantifiable measures but lack context, and Risk appetite defines how much risk the organization is willing to take but does not detail the risks themselves.