Independent UK governance, risk & complianceOur editorial standards ↗Practical guidance. Accountable decisions.
GRC.ME.UKDisclaimer

Risk working document

Risk assessment & treatment record

Connect a specific objective, risk, control and accountable treatment decision.

Version 1.0 · 1 November 2026Editorial template · adapt to your scope
Working notes stay in this page until you explicitly save or export them. Record evidence references rather than confidential or sensitive source documents. A template does not confirm compliance.

Complete each relevant field and record reasons for exclusions. Keep statutory deadlines separate from internal project targets.

Name the activity, service and objective at risk.
Describe how an event could affect the objective.
Record likelihood, impact, scale definitions and uncertainty before controls.
Give each control an owner and evidence reference.
Assess after evidenced controls; explain any score reduction.
Avoid, reduce, transfer or accept; identify approval authority and reasons.
Separate project targets from statutory deadlines.
Record changes, incidents or evidence that require reassessment.

GRC.me.uk · Source-linked guidance at the guidance library · Read the disclaimer.