A risk register is a tool that records and tracks the information about the identified risks, such as the risk description, category, owner, probability, impact, response strategy, status, and action plan. Reviewing the risk register is the best way to help an organization gain insight into its overall risk profile, which is the summary of the nature and level of risk that the organization faces. By reviewing the risk register, the organization can obtain a comprehensive and holistic view of the sources, causes, and consequences of the risks, their likelihood and impact, their interrelationships and dependencies, and their alignment with therisk appetite and tolerance. The risk register can also help the organization to prioritize the risks, allocate the resources, select the risk responses, monitor the risk performance, and evaluate the risk outcomes. References = CRISC Review Manual, 7th Edition, page 99.