CRISC Question 217

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  The correct answer is C. understand the organizational risk profile. An IT risk register is a comprehensive document that identifies, assesses, and prioritizes IT risks. It provides a clear and concise overview of the organization's IT risk landscape, which helps management to understand the organization's risk profile.

• 1

  C "An IT risk register, management gains insights into the specific risks that the organization faces within its IT environment. This includes understanding the nature of the risks, their potential consequences, and the controls or actions that are in place to address them. This understanding is crucial for making informed decisions about risk mitigation strategies, resource allocation, and overall risk management planning."

• Chose C1

  C. understand the organizational risk profile An IT risk register, a document that records details about identified risks including their descriptions, impacts, likelihoods, and mitigation strategies, best helps management understand the organizational risk profile.