Study. uk . com
  1. Home
  2. All questions
  3. Question 31

CompTIA Security+ study material · question 31 of 611

What does a risk register record beyond the description of each risk?

  1. The vendor's CVSS vector for each finding
  2. The penetration test rules of engagement
  3. The full text of the applicable regulation
  4. The owner, current assessment, chosen response and status
Show the answer

Answer: D. The owner, current assessment, chosen response and status

Recording owner, assessment, response and status is what makes risk decisions traceable over time.

Source: NIST SP 800-161 Rev. 1 (NIST) — SP 800-161 Rev. 1 › Risk Register

Challenge yourself on this topic → Study as cards