What is the primary purpose of an Information Security Risk Register in ISO $27001?$

To track employee performance

To catalog and prioritize identified risks

To maintain a list of all employees

To create a marketing plan