An organization maintains independent departmental risk registers that are not automatically aggregated.
Which of the following is the GREATEST concern?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
The greatest concern with maintaining independent departmental risk registers that are not automatically aggregated is that management may be unable to accurately evaluate the overall risk profile of the organization.
Option A, inefficient resource allocation, may be a concern but it is not as significant as the inability to evaluate the overall risk profile of the organization. Independent risk registers may lead to duplication of effort and inefficient allocation of resources but they do not necessarily pose a significant risk to the organization.
Option C, multiple risk treatment efforts may be initiated to treat a given risk, is also a concern as it may lead to unnecessary duplication of effort and resources. However, this is not as significant as the inability to evaluate the overall risk profile of the organization.
Option D, the same risk factor may be identified in multiple areas, is a potential concern, as it may lead to redundancy and inefficiency. However, it is not as significant as the inability to evaluate the overall risk profile of the organization.
Therefore, the greatest concern is that maintaining independent departmental risk registers that are not automatically aggregated may result in management being unable to accurately evaluate the overall risk profile of the organization. This could result in the organization not being able to make informed decisions about risk management and mitigation. It may also lead to the organization being exposed to greater risk than anticipated, due to the inability to identify and assess risk at an enterprise level.