Risk register

A risk register template that scores likelihood and impact, assigns an owner to every risk, and keeps mitigation plans visible until they're closed.

About this template

Most risk registers die in a spreadsheet nobody opens after the kickoff meeting. This template keeps risks visible where the work already happens, so a risk with no owner or no mitigation plan is easy to spot before it becomes an incident.

Score every risk by likelihood and impact, assign one owner, and move it through the board as the picture changes. Track mitigation and contingency separately: a mitigation plan lowers the likelihood or impact before a risk lands, a contingency plan is the fallback if it happens anyway — most registers only capture the first and get caught out by the second. Risks that stall in "Identified" with no mitigation plan are the ones to raise in the next review.

Works alongside a RAID log if you're already tracking assumptions and dependencies elsewhere — this template just gives risk its own focused view.

What’s inside

Columns included

IdentifiedAssessingMitigatingMonitoringClosed

Task types

TechnicalScheduleBudgetResourceExternalCompliance

Custom fields

LikelihoodImpactRisk scoreOwnerMitigation planContingency planReview dateStatus

Key features

  • Likelihood × impact scoring for consistent prioritization
  • One owner per risk, always visible
  • Separate mitigation and contingency plan fields, so fallback plans don't get skipped
  • Review date tracking to catch stale risks
  • Category tagging for technical, schedule, budget, and external risk

Who is this template for?

  • Project managers running multi-phase projects
  • PMO teams standardizing risk reviews
  • Engineering teams tracking technical risk
  • Agencies flagging client-side risk early
  • Operations teams auditing process risk

How to use this template

Use this board to log risks as they surface, score them consistently, and keep mitigation owners accountable.

Step 1

Log every risk as it comes up

Add a card the moment a risk is identified — in planning, in a status meeting, or mid-project. Don't wait for a formal review to capture it.

Step 2

Score likelihood and impact

Rate each risk so the highest-priority ones surface first. A risk score field keeps the sort consistent across a growing register.

Step 3

Assign an owner and review on a cadence

Every open risk needs one owner and a mitigation plan. Review the board weekly or biweekly and move resolved risks to Closed.

Ready to get started?
Learn how to create a board from this template in just a few steps.
Read the step-by-step guide

Frequently asked questions

A living list of project risks, each scored by likelihood and impact, with an owner and a mitigation plan — reviewed on a regular cadence rather than written once and forgotten.

A RAID log tracks Risks, Assumptions, Issues, and Dependencies together. This template is a focused view on just the risk column, with more detail per risk (scoring, mitigation plan, review date).

Use a simple scale (e.g. 1–5) for each, then multiply for a risk score. Consistency matters more than precision — the goal is relative prioritization, not a perfect model.

Weekly for active projects, biweekly for longer ones. Any risk without a recent update is itself a warning sign.

Yes — relate a risk card to the tasks it affects so mitigation work shows up next to the risk that triggered it.

Yes, use task types to group by category (technical, schedule, budget, resource, external, compliance) and filter the board by category during reviews.

A mitigation plan reduces a risk's likelihood or impact before it happens. A contingency plan is the fallback action you take if the risk occurs anyway. Track both — most registers only capture the first, then scramble when a "mitigated" risk still lands.

Yes — pair this with the communication plan template's "Risk escalation" type so high-impact risks get a defined audience, channel, and cadence instead of an ad hoc email.

Related templates