Which element distinguishes a risk register from a risk assessment report?
-
A
The risk register is a one-time snapshot; the report is continuously updated
-
B
The risk register is a living document tracking risks over time; the report captures a point-in-time analysis
-
C
The risk register contains only residual risks; the report contains inherent risks
-
D
The risk register is produced by auditors; the report is produced by the security team