Risk Register

Register Scope and Scoring Method

[Scope, risk categories, scoring scales, appetite, owner, reporting period, and source systems.]

Risk Inventory

[Risk ID, statement in cause-event-impact form, category, affected objective, and evidence.]

Current Exposure and Trend

[Likelihood, impact, inherent score, residual score, trend, velocity, and confidence.]

Controls and Treatment Plans

[Preventive and detective controls, treatment action, accountable owner, due date, cost, and dependency.]

Trigger Indicators and Monitoring

[Leading indicator, threshold, data source, review frequency, and trigger action.]

Escalations and Decisions

[Escalation level, decision needed, approver, date, and recorded rationale.]

Accepted Risks and Expiry

[Acceptance rationale, authority, compensating control, expiry, and re-approval rule.]

Review Cadence and Evidence

[Review meeting, evidence link, closed-risk criteria, changes, and next review.]

Measurement and Ownership