Nuts & Bolts / Form
Risk Register Lite
Track risks without creating an oversized risk process.
Template
- Describe the risk as an event and consequence.
- Assign likelihood: low, medium, or high.
- Assign impact: low, medium, or high.
- Identify current controls or mitigations.
- Assign a risk owner.
- Define next action and review date.
- Close risks when accepted, resolved, obsolete, or transferred.
Expected output
Risk list with likelihood, impact, owner, mitigation, and review date.
Use notes
| Owner | Assign one person responsible for keeping the template current. |
|---|---|
| Review | Review after significant changes, incidents, staffing changes, or tool changes. |
| Risk | Adapt the template to local policies, contractual duties, privacy requirements, and operational risk. |