Risk Register Preparation

Risks vs. Issues

 The fundamental difference between a risk and an issue is that an issue has
already occurred – it is affecting your objective at the present time.
However, a risk only has the potential to affect your objective but has not
yet occurred, hence why we assess the likelihood of a risk occurring. In this
respect you can say that a risk could become an issue if it materialises.
Cause - Risk – Effect Construct
Risk Statement Examples
 Context A:
Manufacturing process, using a critical fabricated aluminum part sourced
from a supplier which has just been bought out.
 Risk statement:
Changes to management of supplier X leads to faulty weld, heat treat and
QA of our special-order welded 6061-T6 aluminum part.
 Context B:
Private school language program, expecting foreign student contingent
from a country where political unrest is imminent.
 Risk statement:
Communication ties severed with institutional contact Mr. X within next 3
weeks results in inability to arrange permissions, visas and travel for
September cohort.
Risk Statement Examples

 Context C:
Custom web security firm plans to set up a new office in Hong Kong. They
are inexperienced in international business and getting help to apply for a
business license.
 Risk statement:
Professional services Co. XYZ prepares deficient business license
application, causing delay to planned September launch.
The “If/ Then” Risk Statement

 IF [Event], THEN [Consequences].

The “If/ Then” Risk Statement

 IF the interface from timekeeping to payroll is not completely tested prior to

the beginning of payroll system testing,
 THEN payroll system testing will experience a day-for-day schedule slip.

 Risk statement (threat): If (event) occurs, the consequences could result in

(negative impact).
 Example: The segregation of reporting practices for regional and
headquarters inspection activities may leave an oversight gap in
compliance, which may allow unregulated materials to enter the country
illegally.
The “If/ Then” Risk Statement

 Risk statement (opportunity): If (event) occurs, the consequences could

result in (positive impact).
 Example: In the event of further operational realignment, there is an
opportunity to partner with portfolio agencies to achieve efficiencies in
delivering support services.