Risk register

How to use this risk register

Use the risk register to connect a business objective with a specific risk, its owner, existing controls and treatment. The tool distinguishes inherent and residual assessments and keeps the explanation for a lower residual score with the record. The 5 × 5 matrix is an editorial aid; define the scale and acceptance authority for your organisation.

Use the tool in three steps

1. Describe the cause, possible event and consequence for the objective.
2. Record the assessment, controls, evidence references and uncertainty. Explain any change in the residual score.
3. Assign treatment, ownership and review triggers. Export a reusable JSON copy, CSV record or print view.

What if the control evidence is missing?

Record the gap and an action to investigate. A policy, contract or claimed control should not automatically reduce the assessed risk. The tool cannot verify whether a control actually operates.

Guidance and working records

• Read the enterprise risk register guide
• Use the risk assessment template
• Explore risk management guidance

The tool sends no entered records to the publisher. Use Save on this device only on an appropriate device; export a working copy for continuity. Privacy and storage details.