In risk management, what is the purpose of tracking risk controls and action plans in a single document?

• A. To replace incident reports.
• B. To manage scheduling of training sessions.
• C. To provide current visibility into risk, controls, and remediation steps.
• D. To determine marketing budgets.

Answer: (C)

Tracking risk controls and action plans in a single document centers on providing current visibility into risk, the controls in place, and the steps needed to remediate gaps. When everything related to risk management sits in one place, stakeholders can quickly see what risks exist, which controls are implemented, who owns them, and what actions are outstanding or completed. This clarity supports timely decision-making, accountability, and governance, because the latest status, due dates, and evidence of effectiveness are easy to review in one glance. It also helps with audits and reporting, since the history of actions and changes stays together and can show how the risk posture has evolved over time. Replacing incident reports or handling unrelated tasks like scheduling trainings or budgeting misses the core purpose, which is to maintain an up-to-date, holistic view of risk, controls, and remediation efforts in one accessible document.