CRISC Certified in Risk and Information Systems Control – Question399

When updating the risk register after a risk assessment, which of the following is MOST important to include?

A.
Actor and threat type of the risk scenario
B. Historical losses due to past risk events
C. Cost to reduce the impact and likelihood
D. Likelihood and impact of the risk scenario

Correct Answer: D