CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is the MOST important consideration for determining the data elements that should be captured in the risk register?

A International risk management standards
B Prior experience of risk managers
C Specific needs of the organization
D Recommendations from internal audit

Explanation

Risk-register data elements should be tailored to the organization’s objectives, context, operations, and risk-management needs so the register supports relevant risk assessment, ownership, treatment, monitoring, and reporting. International standards provide general guidance, but risk-management arrangements must be customized to the organization.

Learn more

ISO 31000:2018 — Risk management — Guidelines

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ818

Community Discussion