You are on page 1of 18

Your Organization

Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Project Name:
Instructions:

Threat Priority Thresholds


High
Medium

1. Enter Impact and Probability Scores (or use default provided)


4.5

2. Enter Priority Cutoff scores for Threats

3. Enter Priority Cutoff scores for Opportunities


4. Enter risk impact and probability scores on the main worksheets. Color coding
indicates priority of Risks and Opportunities

Opportunity Priority Thresholds

Threats

High

Medium

Opportunities
= High Priority

= High Priority

= Medium Priority

= Medium Priority

= Low Priority

= Low Priority

Impact

Threats

Opportunities

0.9

2.7

4.5

6.3

8.1

8.1

6.3

4.5

2.7

0.9

0.7

2.1

3.5

4.9

6.3

6.3

4.9

3.5

2.1

0.7

0.5

1.5

2.5

3.5

4.5

4.5

3.5

2.5

1.5

0.5

0.3

0.9

1.5

2.1

2.7

2.7

2.1

1.5

0.9

0.3

0.1

0.3

0.5

0.7

0.9

0.9

0.7

0.5

0.3

0.1

0.1

0.3

0.5

0.7

0.9

0.9

0.7

0.5

0.3

0.1

Probability

Risk Register [Rev. 1.5 1/15/2009]

Page 1 of 18

Printed on: 04/25/2015

Copyright 2006 CVR/IT Consulting LLC

Risk Register

Your Organization
Name Here

Note: Be certain to fill out the Risk Management Plan before using this workbook. Available at www.cvr-it.com.

Risk Register [Rev. 1.5 1/15/2009]

Page 2 of 18

Printed on: 04/25/2015

Copyright 2006 CVR/IT Consulting LLC

Risk Register [Rev. 1.5 1/15/2009]

Risk Register

Page 3 of 18

Your Organization
Name Here

Printed on: 04/25/2015

Copyright 2006 CVR/IT Consulting LLC

Risk Register

Your Organization
Name Here

Copyright 2009 CVR/IT Consulting LLC


All Rights Reserved

Risk Register [Rev. 1.5 1/15/2009]

Page 4 of 18

Printed on: 04/25/2015

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Threat Register
Project Name: 0
Impact
Score

Probability

Risk
Score

Detectability

Critical

Very High

8.1

Low

Very High

6.3

High

071123b

Very
Serious
Serious

Very High

4.5

Low

071210a

Moderate

Very High

2.7

High

071211a

Minor

Very High

0.9

Low

071222a

Moderate

High

2.1

High

080105a

Moderate

Low

0.9

Low

080109a

High

4.9

High

Low

2.1

Low

080111a

Very
Serious
Very
Serious
Serious

Med

2.5
0
0
0
0
0
0
0
0
0
0
0
0
0

Med

Risk Register [Rev. 1.5 1/15/2009]

Page 5 of 18

Risk ID
Example:
071111a

071123a

Risk Description

New technology presents IT with a steep


learning curve, could cause delay in
implementation
Sample data on this tab are displayed on
the ThreatChart tab

080109b

Impact
Area

Risk Cause

Schedule Staff do not have experinece in


this technology

Status

Assigned to

Active Joe Smith

Trigger Event

Staff does not obtain training;


early "prove feasibility" tasks
are not completed

Print Date: 04/25/2015

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Threat Register
Project Name: 0
Risk ID

Risk Description

Impact
Area

Risk Cause

Impact
Score

Probability

Risk
Score

Detectability

Status

Assigned to

Trigger Event

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 6 of 18

Print Date: 04/25/2015

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Threat Register
Project Name: 0
Risk ID

Risk Description

Impact
Area

Risk Cause

Impact
Score

Probability

Risk
Score

Detectability

Status

Assigned to

Trigger Event

0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 7 of 18

Print Date: 04/25/2015

Risk ID

Results of formal analysis

Example:
071111a

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Response Strategy

Contingency Reserve; Cost and


Schedule adjustments to Project
Plan

Advanced training planned for 3 staff to


occur on 12/2/03

Date of Plan
Approval
04-Mar-06

Comments; Fallback plans

Example text

071123a
071123b
071210a
071211a
071222a
080105a
080109a
080109b
080111a
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 8 of 18

Print Date: 04/25/2015

Risk ID

Results of formal analysis

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Response Strategy

Contingency Reserve; Cost and


Schedule adjustments to Project
Plan

Date of Plan
Approval

Comments; Fallback plans

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 9 of 18

Print Date: 04/25/2015

Risk ID

Results of formal analysis

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Response Strategy

Contingency Reserve; Cost and


Schedule adjustments to Project
Plan

Date of Plan
Approval

Comments; Fallback plans

0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 10 of 18

Print Date: 04/25/2015

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Opportunity Register
Project Name: 0
Opportunity
ID
Example:
021111a

Opportunity Description

New technology presents IT with a real


opportunity, could shave weeks off of
implementation

Impact
Area
Schedule

Opportunity Cause

Impact
Score

Probability

Opportunity DetectaStatus
Score
bility

Very
High

Med

4.5

High

Very
High
Very
High
High

Very Low

0.9

Med

Low

2.7

Low

Very High

6.3

High

High

4.9

High

Med

3.5

High

Low

2.1

High

Very Low

0.7

Assigned to

Trigger Event

Active Joe Smith

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 11 of 18

Print Date: 04/25/2015

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Opportunity Register
Project Name: 0
Opportunity
ID

Opportunity Description

Impact
Area

Opportunity Cause

Impact
Score

Probability

Opportunity DetectaStatus
Score
bility

Assigned to

Trigger Event

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 12 of 18

Print Date: 04/25/2015

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Opportunity Register
Project Name: 0
Opportunity
ID

Opportunity Description

Impact
Area

Opportunity Cause

Impact
Score

Probability

Opportunity DetectaStatus
Score
bility

Assigned to

Trigger Event

0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 13 of 18

Print Date: 04/25/2015

Risk ID
Example:
021111a

Signs and Symptoms

Vendor announces
availability of the new
product

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Results of formal
analysis

Contingency Reserve; Cost and


Schedule adjustments to Project
Plan

Response Strategy

Expedite purchase of a sample of the


new technology

Date of Plan
Approval
04-Mar-06

Comments; Fallback plans

Example text

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 14 of 18

Print Date: 04/25/2015

Risk ID

Signs and Symptoms

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Results of formal
analysis

Response Strategy

Contingency Reserve; Cost and


Schedule adjustments to Project
Plan

Date of Plan
Approval

Comments; Fallback plans

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 15 of 18

Print Date: 04/25/2015

Risk ID

Signs and Symptoms

Your Organization
Name Here

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Results of formal
analysis

Response Strategy

Contingency Reserve; Cost and


Schedule adjustments to Project
Plan

Date of Plan
Approval

Comments; Fallback plans

0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Page 16 of 18

Print Date: 04/25/2015

Risk Register

Copyright 2006 CVR/IT Consulting LLC

Risk Chart - Risk Score x Detectability


This chart displays one data point for each risk.
Low Risk Scores are on the left
High Risk Scores are on the right
Highly detectable risks are at the bottom
Poorly detectable risks are at the top
Pay specific attention to risks in the top right quadrant. These are high risks with low detectability.
To identify highest priority risks (i.e. high Risk Score and Low Detectability), do the following:
1. Select all rows below that have risk data (starting with row 19)
2. Sort on column C, Descending, then sort on Column B, Descending, as follows
Click on Data; Click on Sort; Click on No Header Row; Select Column C (Risk Score x Detectability)
Descending; Click on OK
Click on Data; Click on Sort; Click on No Header Row; Select Column B (Risk Score) Descending; Click on
OK
3. For each unique Risk Score, the highest Risk x Detectability values will be at the top
4. Data on this page are updated automatically as you revise or enter new data on the ThreatRegister tab

Risk Score

071111a
071123a
071123b
071210a
071211a
071222a
080105a
080109a
080109b
080111a
0
0
0
0
0
0
0
0
0
0
0
0
0

8.1
6.3
4.5
2.7
0.9
2.1
0.9
4.9
2.1
2.5
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Register [Rev. 1.5 1/15/2009]

Risk Score
x
Detectability
40.5
6.3
22.5
2.7
4.5
2.1
4.5
4.9
10.5
7.5
0
0
0
0
0
0
0
0
0
0
0
0
0

Risk Detectability
45
40
35
Detectability Score

Risk ID

30
25
20
15
10
5
0
0

Risk Score

Template Source: www.cvr-it.com

Copyright 2006 CVR/IT Consulting LLC

Risk Register

Definitions
For a complete explanation of how to use this template, see the
companion document, Risk Management Plan.

Risk ID

YYMMDDx (e.g., 021112a = first risk, logged on Nov 12, 2002)

Impact Area

Cost, Schedule, Scope, Quality

Impact Score
(Threat)

1/3/5/7/9 where:
1 = Minor impact (could have minimal effect on project cost, schedule or
deliverables)
3 = Moderate impact (could have moderate effect on project cost, schedule or
deliverables)
5 = Serious impact (could significantly increase cost, delay the schedule or
degrade deliverables)
7 = Very Serious impact (could kill the project or seriously reduce project value)
9 = Critical impact (will kill the project)

Impact Score
(Opportunity)

1/3/5/7/9 where:
1 = very low impact (may have slight impact on cost reduction or shortening of
schedule)
3 = low impact (may have some impact in cost reduction or shortening of
schedule)
5 = med impact (could have substantial impact by reducing cost, shortening the
schedule or improving the quality of deliverables)
7 = high impact (could make this project a stunning success)
9 = very high impact (could have a positive impact at the business level by
enhancing Business Value)

Probability

0.1/0.3/0.5/0.7/0.9 where 0.1 is very low and 0.9 is very high

Risk Score

Impact x Probability

Detectability

An indication of how easy it will be to see this risk event coming before it actually
occurs.
1=high (can see the event well in advance)
3=medium (can see the event just before it happens)
5=low (can see the event as it happens or after it happens)

Priority

Determined by criteria set on Priority Chart tab

Status

Active (being worked), Observe, Closed


To add more rows, copy and insert formatted rows.
Note: Values for Probability and Impact Score are derived from the Risk
Management Plan

Template
Source

http://www.cvr-it.com

Risk Register [Rev. 1.5 1/15/2009]

Template Source: www.cvr-it.com

You might also like