Free tool
Risk Register Starter
Most risk registers never get started because the blank spreadsheet is intimidating. Pick your industry to get a starter list of common business, IT, and security risks, then score them, assign owners, and see where to focus.
🔒 Saved only in this browser.
Starter risks come with suggested scores and controls. Adjust every score to your situation — they're a starting point, not an assessment.
Heat map
Click a square to filter the register to those risks.
| Risk | Category | Owner | Likelihood | Impact | Rating | Treatment | Actions / controls | Due | Status |
|---|
Ready to manage risk as a program? AffinityOne connects risks to findings, exceptions, and remediation with owners, due dates, and an audit trail.
Get early access
How scoring works
- Likelihood (1 rare – 5 almost certain) × Impact (1 minor – 5 severe) = risk score from 1 to 25.
- Ratings: 1–4 Low · 5–9 Medium · 10–16 High · 17–25 Critical.
- Treatment: Mitigate (reduce it), Transfer (for example, insurance or contracts), Accept (document and live with it), or Avoid (stop the activity).
Review the register at least quarterly and whenever something significant changes — a new system, vendor, regulation, or incident.