Template Risk Register Entry

Template Risk Register Entry |
Part I—Summary Data |
Risk statement | |
Risk owner | |
Date of last risk assessment | |
Due date for update of risk assessment | |
Risk category |Strategic(IT benefit/value enablement) | Project Delivery(IT program and project delivery) | Operational(IT operations and service delivery) |
Risk classification (copied from risk analysis results)| Low | Medium | High | Very high |
Risk response | Accept | Transfer | Mitigate | Avoid |
Part II—Risk Description |
Title | |
High-level scenario (from list of sample high levelscenarios) | |
Detailed scenario description—scenario components | Actor | |
| Threat type | |
| Event | |
| Asset/resource | |
| Timing | |
Other scenario information | |
PartIII—Risk Analysis Results |
Frequency of scenario (# times per year) | 0 | 1 | 2 | 3 | 4 | 5 |
| N≤0.01 | 0.01<N≤0.1 | 0.1<N≤1 | 1<N≤10 | 10<N≤100 | 100<N |
Comments on frequency| |
Impact of scenario on business | 0 | 1 | 2 | 3 | 4 | 5 |
1. Productivity | Revenue loss over one year |
Impact rating | I≤0.1% | 0.1%<I≤1% | 1%<I≤3% | 3%<I≤5% | 5%<I≤10% |10%<I |
Detailed description of impact | |
2. Cost of response | Expenses associated with managing the loss event (US $) |
Impact rating | I≤10k$ | 10k$<I≤100k$ | 100k$<I≤1M$ |1M$%<I≤10M$ | 10m$<I≤100M$ | 100M$<I |
Detailed description of impact | |
3. Competitive advantage | Drop in customer satisfaction ratings |
Impact rating | I≤0.5 | 0.5<I≤1 |1<I≤1,5 | 1,57<I≤2 | 2<I≤2,5 | 2,5<I |
Detailed description of impact | |
4. Legal | Regulatory compliance—Fines (US $) |
Impact rating | None | < 1m$ | <10m$ | <100M$ |<1B$ | >1B$ |
Detailed description of impact | |
Overall Impact rating (average of four impact ratings) | |
Overall rating of risk, obtained by combining frequency and impact ratings on...