Risk register (option 1)

A risk register is a list of all the risks that your agency has identified and assessed using its risk management process. Templates 6a and 6b are two possible risk register designs that you could consider as a starting point. Information in your risk register
should be tailored to the information needs of your stakeholders. This is an example of a more concise option. Your risk assessment documentation should form the basis for the information in your risk register.

Risk Register
Date Last Review and
Business Assessed Worst Case Risk Controls/ Control Residual Risk
Risk ID Risk Description Risk Category Reporting Comments
Area/Risk Owner Level Treatments Effectiveness Level
DD/MM/YYYY requirements

Uncertainties or sensitivities - are the

Substantially Expected level of
risks that you have identified making
The risk if the effective risk remaining How and when the
Current controls the achievement of your agency’s
current control after once risk and controls
and proposed objectives too uncertain?
strategy fails Partially effective additional are to be reviewed
treatments
completely treatments have and reported?
Resources required – financial
Largely ineffective been implemented
physical, human resources
Risk register (option 2)
A risk register is a list of all the risks that your agency has identified and assessed using its risk management process. Templates 6a and 6b are two possible risk register designs that you could consider as a starting point. Information in your risk register should be tailored to
the information needs of your stakeholders. This is an example of a more concise option. Your risk assessment documentation should form the basis for the information in your risk register.
Risk Register

Assessment Risk Ratings Accept risk? Controls/Risk Treatment

Objective (s) Review and reporting
Risk ID Risk description Consequence Type(s) Risk Owner Comments
Date Affected Control requirements
By Case C L Risk level Description
(DD/MM/YYYY) Effectiveness

Worst
current controls
case
Include name of the
person managing the
-financial risk and the area of Uncertainties or sensitivities - are
-service delivery the organisation they Level of risk the risks that you have identified
Additional treatment if
work in. remaining after Is the risk How and when the risk making the achievement of your
the risk is not
Note that these Current the application acceptable/ and controls are to be agency’s objectives too uncertain?
acceptable/ tolerable
should be aligned to If the risk owner is of existing tolerable? reviewed and reported?
Timing
your consequence different o the person controls Resources required – financial
table assigned to treat the physical, human resources
risk you should
include their details
Expected level
Is the risk
Residual of risk remaining
acceptable/tolerab
after risk
le?
treatments

Worst
case

Current

Residual

Worst
case

Current
Risk register (option 2)
A risk register is a list of all the risks that your agency has identified and assessed using its risk management process. Templates 6a and 6b are two possible risk register designs that you could consider as a starting point. Information in your risk register should be tailored to
the information needs of your stakeholders. This is an example of a more concise option. Your risk assessment documentation should form the basis for the information in your risk register.
Risk Register

Assessment Risk Ratings Accept risk? Controls/Risk Treatment

Objective (s) Review and reporting
Risk ID Risk description Consequence Type(s) Risk Owner Comments
Date Affected Control requirements
By Case C L Risk level Description
(DD/MM/YYYY) Effectiveness

Residual

Worst
case

Current

Residual