A PRIMARY function of the risk register is to provide supporting information for the development of an organization’s risk: