Risk Register CRISC Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   Which of the following information should be captured in the risk register as a data input?

   • AThe organization's financial statements
   • BThe source of the risk
   • CThe risk owner's personal contact details
   • DThe risk assessment methodology used
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   During a risk assessment, the IT team identifies a new risk related to unpatched legacy systems. The risk owner is the IT manager. Which set of fields is essential to include in the risk register for this new entry?

   • ARisk category, owner, and the date of the next audit.
   • BRisk ID, description, category, likelihood, impact, risk level, owner, and status.
   • CRisk description, likelihood, impact, and the cost of the risk assessment.
   • DRisk ID, description, and the name of the person who reported the risk.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company's risk register is maintained in a spreadsheet that is accessible only to the risk management team. The audit committee has requested a quarterly risk report, but the risk management team is concerned about the accuracy of the data because some risk owners do not update their risks. What is the best way to ensure the report is reliable?

   • AAsk the audit committee to accept the report with known inaccuracies.
   • BGenerate the report from the spreadsheet without owner confirmation.
   • CMove the register to a cloud-based tool and assume it will be accurate.
   • DRequire risk owners to confirm or update their risks before the quarterly report is generated.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How does the risk register support the risk response phase of the risk management process?

   • ABy documenting the selected response strategies and tracking their implementation
   • BBy serving as a repository for risk assessment methodologies
   • CBy eliminating the need for risk monitoring
   • DBy automatically selecting the best response for each risk
   Reveal Solution Discussion Select an answer first