Skip to main content
All glossary terms

Regulation & risk

Risk Register

A risk register is a structured record of identified risks, their context, owners, assessment, and planned responses. Teams use it to track decisions over time; the fields and scoring method vary according to the organization and the risks being managed.

Also known as risk log.

Why it matters in practice

A register can make ownership and follow-up visible, but a numeric score is not a complete explanation of uncertainty or impact. Entries should connect to evidence and be reviewed when assumptions change. A register is one tool within risk management, not a substitute for specialist analysis or effective controls.

Example

A service owner records a dependency failure scenario, names a response owner, and links the mitigation to a recovery exercise.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.