Which component belongs in an IT risk register?

• A. Project timelines
• B. User feedback scores
• C. Likelihood
• D. Vendor names

Answer: (C)

A risk register is a living tool that records identified IT risks along with attributes used to evaluate and prioritize how to respond. The likelihood, or probability, of a risk occurring is essential because it combines with impact to determine the overall risk level. This pairing helps you compare risks and decide where to focus mitigation efforts, monitoring, and ownership. In short, you can’t effectively prioritize risks without including likelihood.

Project timelines describe scheduling and delivery plans, which are part of project management rather than a fundamental risk attribute. User feedback scores reflect quality or satisfaction, not the chance that a negative event will happen. Vendor names may appear in related records as stakeholders or sources of risk, but they aren’t a standard component that conveys risk probability or priority.