Risk Register Template 2017/18

Last Update: xx/xx/xxxx

Risk Lead: x
Quarterly Summary: x

Previous period residual RAG This period residual RAG Target residual RAG
Business
Risk Date Objectives / Risk Interdepen Control Additional Mitigating Actions Action Due date for Date of last Next review Closed
ref. identified Priorities Linked Risks Risk description owner dencies Existing controls owner(s) Likelihood RAG RAG RAG trend & Quarterly Update owner actions RAG review date date
Impact status Likelihood Impact status Likelihood Impact status Target date
affected
Strategic Risks (these include strategic risks which concern the organisations raison d'etre and could impact the achievement of our key objectives (E.G. Data Loss, Leadership Capability); as well as the big external events/perils and how we can become more resilient E.G. Economic Downturn, Terrorist Attack, Extreme Weather or Cyber Attacks)
0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:
Cross-cutting Operational Risks (the big cross-cutting internal risks over which we have full or partial control and/or that can be managed through internal controls E.G. Fraud, Health & Safety, Capacity & Capability and Data Security) 0
0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:

Directorate/Regional Risks (local / delivery risks that could impact the achievement of directorate business plans) 0
0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:

Programme/Project Risks (things that threaten overarching programmes or projects; specific examples may relate to finance, stakeholders, benefits, shifing requirements, slippage in delivery requirements or failure to deliver. N.B. detailed project level risk and issue logs may be maintained separately by project managers - if so only RED project risks should be escalated to this register). 0
0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:

0 0 Additional Mitigating Actions: 0

Quarterly Update:
 Risk Heatmap Key

Realised Trend /
Current Target New
Risk current Target Direction
position position Risk
(Issue) direction of travel
of travel

Draft Strategic Risk Register Heatmap as at 15/11/2016:

List of risks
5

4
Impct

1 2 3 4 5

Likelihood
 Overall Risk Rating

5 A (5) A/R (10) A/R (15) R (20) R (25)

4 A/G (4) A (8) A/R (12) R (16) R (20)

ct
Impa 3 A/G (3) A (6) A (9) A/R (12) A/R (15)

2 G (2) A/G (4) A (6) A (8) A/R (10)

1 G (1) G (2) A/G (3) A/G (4) A (5)

1 2 3 4 5

Likelihood
Likelihood Impact RAG Trend RAG
1 1 NEW Red - Very High
(24)
2 2 ↗ Risk Red - Very High
Increasing (20)
3 3 → Stable / Red - Very High
No Movement (16)
4 4 ↘ Risk Amber/Red -
Decreasing High (15)

5 5 N/A Amber/Red -
High (12)

NEW (not NEW (not Amber/Red -

assessed) assessed) High (10)

N/A N/A Amber -

Medium (9)
Amber/Green -
Medium (8)

Amber/Green -
Medium (6)

Amber/Green -
Medium (5)

Green - Low (4)

Green - Low (3)

Green - Very
Low (2)

Green - Very
Low (1)