Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

PECB ISO-31000-Lead-Risk-Manager Exam - Topic 3 Question 11 Discussion

What is one of the primary purposes of maintaining records in risk management?
B) To track risk management performance and provide an audit trail for verification
A) To communicate information about risks to decision makers only
C) To provide confidence that all risks are completely eliminated
D) To replace the need for monitoring and review

PECB ISO-31000-Lead-Risk-Manager Exam - Topic 3 Question 11 Discussion

Actual exam question for PECB's ISO-31000-Lead-Risk-Manager exam
Question #: 11
Topic #: 3
[All ISO-31000-Lead-Risk-Manager Questions]

What is one of the primary purposes of maintaining records in risk management?

Show Suggested Answer Hide Answer
Suggested Answer: B

The correct answer is B. To track risk management performance and provide an audit trail for verification. ISO 31000:2018 emphasizes that maintaining appropriate records is a fundamental element of effective risk management. Records support transparency, accountability, traceability, and continual improvement.

Risk management records enable organizations to track the effectiveness and performance of risk management activities over time. By documenting identified risks, assessments, treatment decisions, monitoring results, and reviews, organizations can evaluate whether risk management processes are working as intended and whether objectives are being achieved.

In addition, maintaining records provides an audit trail, allowing internal and external reviewers to verify that risk management decisions were made systematically, based on evidence, and in line with established criteria and governance requirements. This is particularly important for regulated industries and for demonstrating due diligence.

Option A is incorrect because records serve a broader purpose than communication alone; they support learning, verification, and improvement. Option C is incorrect because ISO 31000 explicitly recognizes that risks cannot be completely eliminated. Option D contradicts ISO 31000, as records complement---not replace---monitoring and review.

From a PECB ISO 31000 Lead Risk Manager perspective, well-maintained records are essential for governance, assurance, and continuous improvement. Therefore, the correct answer is to track risk management performance and provide an audit trail for verification.


Contribute your Thoughts:

0/2000 characters
C seems too absolute. We can't eliminate all risks, so I doubt that's the right choice. I think B is the best fit here.
upvoted 0 times
...
Olive
5 days ago
I vaguely recall a practice question that emphasized the importance of an audit trail. That makes me lean towards B as well.
upvoted 0 times
...
Carissa
10 days ago
I feel like A could be a trick answer. We definitely talked about how communication is important, but it can't be the only purpose, right?
upvoted 0 times
...
Tequila
15 days ago
I think the answer might be B, but I'm not entirely sure. I remember something about tracking performance in risk management.
upvoted 0 times
...

Save Cancel