CRISC Question 389

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A. Avoiding a risk that was previously accepted. The most important risk register update for senior management to review is "A. Avoiding a risk that was previously accepted." This update represents a significant change in the organization's risk posture and risk management strategy. When a risk that was previously accepted is now being avoided, it signals a change in the organization's willingness to tolerate that risk, which could have implications for overall risk appetite and strategic decision-making. While the other updates (extending the date of a future action plan, retiring a risk scenario, changing a risk owner) are also important, they may not have the same level of impact on risk posture and strategic decisions as a change in risk acceptance status. The decision to avoid a risk may indicate a shift in business objectives, external factors, or the organization's approach to risk management that senior management should be informed about and review.

• Chose B1

  Going with Kozy. B

• Chose A1

  Agree it is A. Risk avoidance equates to stopping / ceasing an activity, and senior management should be aware of such a change.