The risk register contains no mapping between risks and business objectives. Why is this a problem?

1. It makes all risk estimates mathematically impossible
2. It prevents every technical test from running
3. It weakens prioritization and communication of why the exposures matter
4. It proves the organization has no risk appetite