Exam CISM topic 1 question 780 discussion

While risk acceptance criteria, risk severity level, and risk appetite are also important components of a risk management framework, without clear risk ownership, it can be challenging to effectively manage and address risks within an organization. Therefore, capturing risk ownership is often considered a fundamental aspect of a robust risk register.

Based on Elimination method. Acceptance criteria, appetite, severity are identified in prior stages itself. So the it's important to assign the risk to someone so they can be accountable

C is correct

C. Risk ownership

C. If risk owner is not identified in that document, all other details would be pointless as no one will be accountable to manage those risks.

i thin will be B

Definitely not C> A or B. A risk register is a business record that contains information about business risks and information about their origin, potential impact, affected assets, probability of occurrence, and treatment. Gregory, Peter H.; Gregory, Peter H.. CISM Certified Information Security Manager Bundle (p. 258). McGraw Hill LLC. Kindle Edition.

The MOST important detail to capture in an organization's risk register is risk ownership. Therefore, the correct answer is option C.