The central record of identified risks, their assessment, owners, and treatment status.
A risk register is the working document that captures every identified risk in one place. For each risk it typically records a description, the affected asset, the assessed likelihood and impact, the owner, the chosen treatment, and the current status.
It is the operational heart of a risk-based management system, giving leadership a single view of exposure and a basis for tracking treatment over time.
Related frameworks