Exam CRISC topic 1 question 1877 discussion

I choose C. A post-implementation review of a new application has been initiated by senior management.- this do not indicate any risk being identified, therefore not necessarily trigger an update to risk register

Both (C) and (D) are strong triggers for updating the risk register. However, (D) might be considered slightly more likely to trigger an update because it is a dedicated process for identifying changes in the risk profile following a significant implementation. The findings of the review are almost guaranteed to necessitate updates to accurately reflect the current risk landscape.

The correct answer is: **C. A project to implement a risk response action plan has been completed and closed successfully.** Explanation: The risk register is a comprehensive document that records identified risks, their assessment, and the strategies employed to manage them. It is updated throughout the project lifecycle, especially when significant events occur that affect risk status. Completing and closing a project aimed at implementing a risk response action plan signifies that specific risks have been addressed. This development necessitates updating the risk register to reflect the current status of these risks, including any changes in their severity, the effectiveness of the mitigation strategies, and any residual risks that may remain.