22. A PRIMARY reason for initiating a policy exception process is when: A. The risk is justified by the benefit. B. Policy compliance would be difficult to enforce. C. Operations are too busy to comply. D. Users may be inconvenienced. The correct answer is 23. The preparation of a risk register begins in which risk management process? A. Risk response planning B. Risk monitoring and control c. Risk management planning D. Risk identification The correct answer is