Risk Register CRISC Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A risk register has multiple owners for each risk, and updates are inconsistent. Some risks are updated frequently, while others are not updated for months. Management wants a single point of accountability for each risk. What is the most effective approach?

   • ARemove risks that are not updated regularly.
   • BHave the risk management team update all risks centrally.
   • CAllow multiple owners to continue but require monthly meetings.
   • DAssign a single risk owner for each risk and define their update responsibilities.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which role is responsible for the day-to-day maintenance of the risk register, such as entering new risks and updating statuses?

   • AExternal auditor
   • BRisk owner
   • CRisk register administrator
   • DBoard of directors
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A risk register uses a 5x5 likelihood-impact matrix to calculate risk levels. A risk with likelihood 4 and impact 5 is rated as 'high.' After implementing a control, the likelihood drops to 2, but the impact remains 5. The risk owner updates the register with the new likelihood. What else should be updated to maintain the integrity of the register?

   • ARecalculate the risk level based on the new likelihood and impact.
   • BKeep the risk level as 'high' because the impact is still 5.
   • CChange the risk owner because the risk level changed.
   • DUpdate the impact to 3 to reflect the control's effect.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   The board of directors wants a concise overview of the company's top risks and the effectiveness of risk responses. Which use of the risk register best meets this need?

   • APublish the register on the company intranet for all employees.
   • BShare the register only with the risk management team.
   • CGenerate a dashboard that highlights high-risk items, trends, and treatment status.
   • DProvide the full register with all details to the board.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a risk register, which field typically contains a brief narrative that explains the nature of the risk?

   • ARisk Description
   • BRisk Impact
   • CRisk Status
   • DRisk Likelihood
   Reveal Solution Discussion Select an answer first