What is the term for a repository of the key attributes of potential and known IT risk issues?

• A. IT risk register
• B. Preventive control
• C. Risk map
• D. Risk owner

Answer: (A)

The main idea here is that a risk register is a centralized place to store all the essential details about IT risk issues, both those that might happen and those already identified. This repository holds the key attributes of each risk, such as a description, category, likelihood, impact, and overall risk rating, along with who owns the risk, the controls in place, any planned mitigations, status, and target dates. By keeping this information together, teams can consistently track, compare, and prioritize risks, assign accountability, and monitor remediation efforts over time. This makes it the most practical and comprehensive tool for managing risk information in an IT context. In contrast, a preventive control is a type of measure aimed at stopping events from occurring, a risk map is a visual layout of risk levels across dimensions, and a risk owner is the person responsible for managing a risk. So the repository that captures all these attributes is the IT risk register.