A relationship between a registered risk and a control will be automatically generated when the control objective and risk statement have the same what?

A relationship between a registered risk and a control will be automatically generated when the control objective and risk statement have the same what?

• A. Control
• B. Owner
• C. Entity Type
• D. Risk

Answer: (C)

Automatic relationship generation between a registered risk and a control happens when both the control objective and the risk statement refer to the same Entity Type. The Entity Type defines the scope or domain (such as a process, service, or asset) that the risk or control concerns. When they share this context, the system recognizes they operate in the same area, so it can automatically link the risk to the control as addressing that risk within that scope. Other attributes like a specific control, owner, or the risk instance itself don’t establish that shared context, so they don’t trigger the automatic linkage. Matching the Entity Type is what enables the automatic relationship to be created.

Automatic relationship generation between a registered risk and a control happens when both the control objective and the risk statement refer to the same Entity Type. The Entity Type defines the scope or domain (such as a process, service, or asset) that the risk or control concerns. When they share this context, the system recognizes they operate in the same area, so it can automatically link the risk to the control as addressing that risk within that scope. Other attributes like a specific control, owner, or the risk instance itself don’t establish that shared context, so they don’t trigger the automatic linkage. Matching the Entity Type is what enables the automatic relationship to be created.