In risk management, what is a risk register?

In risk management, what is a risk register?

• A. A static list of past incidents only.
• B. A living document listing risks, likelihood, impact, mitigations, owners, and deadlines.
• C. A checklist of safety equipment availability.
• D. A log of training attendees.

Answer: (B)

In risk management, a risk register is a dynamic, centralized record that captures each identified risk along with its probability, potential impact, planned mitigations, the owner responsible for addressing it, and the deadlines for action. This living document is the tool teams use to monitor where risk stands, what is being done to reduce it, and who is accountable for follow-through. Because risks change as projects progress and conditions evolve, the register is continually updated to reflect new information and shifting priorities, enabling informed decision-making and resource allocation.

It’s not just a static catalog of past incidents, which would miss the forward-looking necessity of managing risk. It isn’t a checklist of safety equipment availability, which concerns inventory rather than risk handling. It isn’t a log of training attendees, which tracks people rather than hazards or mitigations. The strength of the risk register lies in its role as a living, actionable map of what could threaten objectives, how it’s being mitigated, and who will ensure the actions are completed by set dates.