CRISC Certified in Risk and Information Systems Control – Question400

An organization maintains independent departmental risk registers that are not automatically aggregated. Which of the following is the GREATEST concern?

A.
Resources may be inefficiency allocated
B. Management may be unable to accurately evaluate the risk profile
C. Multiple risk treatment efforts may be initiated to treat a given risk
D. The same risk factor may be identified in multiple areas

Correct Answer: B