Question: Where would you record risks that have been identified and their details, such as their ID and name, classification of information, and the risk owner?

1. in the risk assessment documentation
2. in the risk register
3. in the business impact ledger
4. in the Orange Book

Answer: The correct answer of the above question is Option B:in the risk register