Risk Register
What is Risk Register?
A documented inventory of identified risks, their assessments, treatment plans, and current status. A key tool in enterprise risk management.
Related terms
Frameworks that govern risk register
What the standards actually require on risk register
Requirements naming risk register across 6 standards, quoted from the control text.
The prospective lead appointed party sets up the delivery team's risk register covering the production and delivery of information, considering the assumptions in its BIM execution plan, how clear the EIR (ISO 19650-3) issued by the appointing party are, and w...
iso-19650-organisation-and-digitisation-of-information-about-buildings-and-civil-engineering-works-bim::3:5.3.6 · 5.3.6 Establish the delivery team's risk register →The organisation identifies and assesses risks to privacy and records them in a risk register.
australian-energy-sector-cyber-security-framework-aescsf::PRIVACY-1J · PRIVACY-1J: Privacy risks recorded in a risk register →Incident systems must reach the whole organisation: staff helped to spot and report, patients and families given a way to raise concerns, staff and consumers drawn into reviews, findings fed back promptly to the board, staff and consumers, lessons turned into...
australia-national-safety-and-quality-health-service-nsqhs-standards-second-edition::1.11-1.12 · Organisation-wide incident management and investigation systems support reporting by workforce and patients, involve them in review, feed back analyses, drive improvement and the risk register, and open disclosure follows the Australian Open Disclosure Framework →The designated CII owner must create and keep a cybersecurity risk register that catalogues and profiles the information and cyber risks targeting the infrastructure (submitted to the Authority under paragraph 7(b)).
ghana-cybersecurity-act::CIID.5.2l · Directive 5.2(l): keep a cybersecurity risk register for the CII →Firms whose AI use has a material impact must set up and run a register of risks covering at least bias in the system and outputs, erroneous outputs, limits on information about the system and its training data, and retention or use of data the firm inputs;
rics-rules-of-conduct-and-global-professional-standards::AI-3.3 · AI: risk register reviewed at least quarterly →Risk register: no Level 1 requirement. At Levels 2 and 3 the CSP keeps a risk register with specified attributes for each risk, including its priority level and control strategy, beyond ISO/IEC 27001's general requirement.
mtcs-singapore::8.5 · Risk register →Questions people ask about risk register
What is Risk Register?
Why is Risk Register important for compliance?
What concepts are related to Risk Register?
Which compliance frameworks address Risk Register?
Where can I learn more about Risk Register?
See how Risk Register applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.