Who is primarily responsible for ensuring that a risk in the register is managed and that the register is updated accordingly?

The risk register administrator

Which action is part of maintaining a risk register?

Deleting risks that have been closed for more than a year

Keeping the register unchanged to ensure consistency

Limiting access to only the risk owner

Updating the risk level after a change in likelihood or impact

A company's risk register is used for both operational risk tracking and strategic decision-making. The register currently contains detailed operational risks but lacks strategic risks such as market shifts and regulatory changes. The board has asked for a more balanced view. What is the best way to update the register?

Merge all risks into a single category without distinction.

Add strategic risks to the register and categorize them separately from operational risks.

Remove operational risks to focus on strategic risks.

Create a separate strategic risk register and keep the operational one unchanged.

A risk manager needs to communicate the status of risk treatment plans to senior management. The register contains treatment plans with target dates and owners. What is the most effective way to present this information?

Create a summary report showing treatment plan status, overdue items, and owners.

Send the full register to senior management.

Wait until all treatment plans are complete before reporting.

Verbally describe the status without written documentation.

Certified in Risk and Information Systems Control

Domain 2Objective 7

Risk Register CRISC Practice Questions (Page 3)

Part of the Domain 2: Risk Assessment domain, which accounts for 22% of the CRISC exam.

34questions here

7free pages

7concepts

22%of the exam

Questions 11–15

11foundation · easy
Who is primarily responsible for ensuring that a risk in the register is managed and that the register is updated accordingly?
Select an answer first
12foundation · easy
Which action is part of maintaining a risk register?
Select an answer first
13foundation · easy
In which phase of the risk management process is the risk register used to track changes in risk levels over time?
Select an answer first
14expert · hard
A company's risk register is used for both operational risk tracking and strategic decision-making. The register currently contains detailed operational risks but lacks strategic risks such as market shifts and regulatory changes. The board has asked for a more balanced view. What is the best way to update the register?
Select an answer first
15application · medium
A risk manager needs to communicate the status of risk treatment plans to senior management. The register contains treatment plans with target dates and owners. What is the most effective way to present this information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CRISC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CRISC” is a trademark of its owner, used for identification only.

Risk Register CRISC Practice Questions (Page 3)

Questions 11–15

Who is primarily responsible for ensuring that a risk in the register is managed and that the register is updated accordingly?

Which action is part of maintaining a risk register?

In which phase of the risk management process is the risk register used to track changes in risk levels over time?

A risk manager needs to communicate the status of risk treatment plans to senior management. The register contains treatment plans with target dates and owners. What is the most effective way to present this information?

Keep studying — Domain 2: Risk Assessment