Certified in Risk and Information Systems Control (CRISC) — Question 693

Periodically reviewing and updating a risk register with details on identified risk factors PRIMARILY helps to:

Answer options

• A. provide a current reference to stakeholders for risk-based decisions
• B. minimize the number of risk scenarios for risk assessment
• C. aggregate risk scenarios identified across different business units
• D. build a threat profile of the organization for management review

Correct answer: A

Explanation

The correct answer is A because a regularly updated risk register provides stakeholders with the latest information necessary for making informed risk-based decisions. Options B and C are incorrect as they imply a reduction or aggregation of scenarios rather than the focus on providing current information. Option D, while related to risk management, does not capture the primary purpose of updating the risk register.