Reviewing which of the following BEST helps an organization gam insight into its overall risk profile''

A risk register is a tool that records and tracks the information about the identified risks, such as the

risk description, category, owner, probability, impact, response strategy, status, and action plan.

Reviewing the risk register is the best way to help an organization gain insight into its overall risk

profile, which is the summary of the nature and level of risk that the organization faces. By reviewing

the risk register, the organization can obtain a comprehensive and holistic view of the sources,

causes, and consequences of the risks, their likelihood and impact, their interrelationships and

dependencies, and their alignment with therisk appetite and tolerance. The risk register can also

help the organization to prioritize the risks, allocate the resources, select the risk responses, monitor

the risk performance, and evaluate the risk outcomes. Reference = CRISC Review Manual, 7th

Edition, page 99.