CRISC Certified in Risk and Information Systems Control – Question792

What is the GREATEST concern with maintaining decentralized risk registers instead of a consolidated risk register?

A.
Aggregated risk may exceed the enterprise’s risk appetite and tolerance.
B. Duplicate resources may be used to manage risk registers.
C. Standardization of risk management practices may be difficult to enforce.
D. Risk analysis may be inconsistent due to non-uniform impact and likelihood scales.

Correct Answer: D