What is a risk register and how is it used?

What is a risk register and how is it used?

• A. A static list of facilities.
• B. A living document listing risks, their severity, likelihood, controls, and action plans.
• C. A financial ledger.
• D. A checklist for safety drills.

Answer: (B)

In risk management, understanding what could go wrong and how to respond is essential. A risk register is a living document that lists each identified risk, its probability and potential impact, the controls already in place, and the action plans to treat or mitigate it. It also tracks who owns the risk, who will take action, due dates, and the current status. Because it’s continually updated as new risks appear and conditions change, it provides a current view of risk exposure, helps prioritize what to fix first, guides how resources are allocated, and supports clear communication with stakeholders about progress and remaining uncertainties. This is why it stands apart from static lists, financial ledgers, or drill checklists, which don’t provide the ongoing, integrated view of risks, controls, and responsible actions.

In risk management, understanding what could go wrong and how to respond is essential. A risk register is a living document that lists each identified risk, its probability and potential impact, the controls already in place, and the action plans to treat or mitigate it. It also tracks who owns the risk, who will take action, due dates, and the current status. Because it’s continually updated as new risks appear and conditions change, it provides a current view of risk exposure, helps prioritize what to fix first, guides how resources are allocated, and supports clear communication with stakeholders about progress and remaining uncertainties. This is why it stands apart from static lists, financial ledgers, or drill checklists, which don’t provide the ongoing, integrated view of risks, controls, and responsible actions.