Risk Register Your Organization Name Here Project Name: Instructions: 1. Enter Impact and Probability Scores (or use default provided) High 4.5 2. Enter Priority Cutoff scores for Threats Medium 2 3. Enter Priority Cutoff scores for Opportunities High 4 Medium 2 9 0.9 2.7 4.5 6.3 8.1 8.1 6.3 4.5 2.7 0.9 7 0.7 2.1 3.5 4.9 6.3 6.3 4.9 3.5 2.1 0.7 5 0.5 1.5 2.5 3.5 4.5 4.5 3.5 2.5 1.5 0.5 3 0.3 0.9 1.5 2.1 2.7 2.7 2.1 1.5 0.9 0.3 1 0.1 0.3 0.5 0.7 0.9 0.9 0.7 0.5 0.3 0.1 0.1 0.3 0.5 0.7 0.9 0.9 0.7 0.5 0.3 0.1 Note: Be certain to fill out the Risk Response Plan before using this workbook. Available at www.cvr-it.com. 4. Enter risk impact and probability scores on the main worksheets. Color coding indicates priority of Risks and Opportunities Opportunities Impact = Medium Priority = Low Priority = Medium Priority = Low Priority Threat Priority Thresholds Opportunity Priority Thresholds Threats Probability Threats = High Priority Opportunities = High Priority Risk Register [Rev. 1.4 10-24-2007] Page 1 of 21 Printed on: 2/5/2008Risk Register Your Organization Name Here Project Name: Risk ID Risk Description Impact Area Risk Cause Impact Score Probability Risk Score Detectabillit Status Assigned to Example: 071111a New technology presents IT with a steep learning curve, could cause delay in implementation Schedule Staff do not have experinece in this technology Critical Very High 8.1 Low Active Joe Smith 071123a Sample data on this tab are displayed on the ThreatChart tab Very Serious Very High 6.3 High 071123b Serious Very High 4.5 Low 071210a Moderate Very High 2.7 High 071211a Minor Very High 0.9 Low 071222a Moderate High 2.1 High 080105a Moderate Low 0.9 Low 080109a Very Serious High 4.9 High 080109b Very Serious Low 2.1 Low 080111a Serious Med 2.5 Med 00000000000 Threat Register 0 Risk Register [Rev. 1.4 10-24-2007] Page 2 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here 0000000000000000000000000000000000000 Risk Register [Rev. 1.4 10-24-2007] Page 3 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here 00 Risk Register [Rev. 1.4 10-24-2007] Page 4 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Trigger Event Risk ID Signs and Symptoms Results of formal analysis Response Strategy Contingency Reserve; Cost and Schedule adjustments to Project Plan Date of Plan Approval Example: 071111a Staff does not obtain training; early "prove feasibility" tasks are not completed Advanced training planned for 3 staff to occur on 12/2/03 04-Mar-06 071123a 071123b 071210a 071211a 071222a 080105a 080109a 080109b 080111a 00000000000 Risk Register [Rev. 1.4 10-24-2007] Page 5 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here 0000000000000000000000000000000000000 Risk Register [Rev. 1.4 10-24-2007] Page 6 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here 00 Risk Register [Rev. 1.4 10-24-2007] Page 7 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Comments; Fallback plans Example text High 4.5 Medium 2 High 4 Medium 2 Threat Priority Thresholds Opportunity Priority Thresholds Do not remove or change these cells! Risk Register [Rev. 1.4 10-24-2007] Page 8 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 9 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 10 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Project Name: Opportunity ID Opportunity Description Impact Area Opportunity Cause Impact Score Probability Opportunity Score Detectabillit Status Assigned to Example: 021111a New technology presents IT with a real opportunity, could shave weeks off of implementation Schedule Very High Med 4.5 High Active Joe Smith Very High Very Low 0.9 Med Very High Low 2.7 Low High Very High 6.3 High High 4.9 High Med 3.5 High Low 2.1 High Very Low 0.7 000000000000000 Opportunity Register 0 Risk Register [Rev. 1.4 10-24-2007] Page 11 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here 0000000000000000000000000000000000000 Risk Register [Rev. 1.4 10-24-2007] Page 12 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Trigger Event Risk ID Signs and Symptoms Results of formal analysis Response Strategy Contingency Reserve; Cost and Schedule adjustments to Project Plan Date of Plan Approval Example: 021111a Vendor announces availability of the new product Expedite purchase of a sample of the new technology 04-Mar-06 0000000000000000000000 Risk Register [Rev. 1.4 10-24-2007] Page 13 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here 0000000000000000000000000000000000000 Risk Register [Rev. 1.4 10-24-2007] Page 14 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Comments; Fallback plans Example text High 4.5 Medium 2 High 4 Medium 2 Threat Priority Thresholds Opportunity Priority Thresholds Do not remove or change these cells! Risk Register [Rev. 1.4 10-24-2007] Page 15 of 21 Print Date: 2/5/2008Risk Register Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 16 of 21 Print Date: 2/5/2008Risk Chart -Risk Score x Detectability This chart displays one data point for each risk. Low Risk Scores are on the left High Risk Scores are on the right Highly detectable risks are at the bottom Poorly detectable risks are at the top Pay specific attention to risks in the top right quadrant. These are high risks with low detectability. To identify highest priority risks (i.e. high Risk Score and Low Detectability), do the following: 1. Select all rows below that have risk data (starting with row 19) 2. Sort on column C, Descending, then sort on Column B, Descending, as follows 3. For each unique Risk Score, the highest Risk x Detectability values will be at the top 4. Data on this page are updated automatically as you revise or enter new data on the ThreatRegister tab Risk ID Risk Score Risk Score x Detectability 071111a 8.1 40.5 071123a 6.3 6.3 071123b 4.5 22.5 071210a 2.7 2.7 071211a 0.9 4.5 071222a 2.1 2.1 080105a 0.9 4.5 080109a 4.9 4.9 080109b 2.1 10.5 080111a 2.5 7.5 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Click on Data; Click on Sort; Click on No Header Row; Select Column C (Risk Score x Detectability) Descending; Click on OK Click on Data; Click on Sort; Click on No Header Row; Select Column B (Risk Score) Descending; OK Risk Detectability 05 10 15 20 25 30 35 40 45 0 1 2 3 4 5 Risk Score Detectability0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0on the ThreatRegister tab Column C (Risk Score x Detectability) Column B (Risk Score) Descending; Click on Risk Detectability 5 6 7 8 9 Risk ScoreDefinitions For a complete explanation of how to use this template, see the companion document, Risk Management Plan. Risk ID YYMMDDx (e.g., 021112a = first risk, logged on Nov 12, 2002) Impact Area Cost, Schedule, Scope, Quality Impact Score (Threat) 1/3/5/7/9 where: 1 = Minor impact (could have minimal effect on project cost, schedule or deliverables) 3 = Moderate impact (could have moderate effect on project cost, schedule or deliverables) 5 = Serious impact (could significantly increase cost, delay the schedule or degrade deliverables) 7 = Very Serious impact (could kill the project or seriously reduce project value) 9 = Critical impact (will kill the project) Probability 0.1/0.3/0.5/0.7/0.9 where 0.1 is very low and 0.9 is very high Risk Score Impact x Probability Detectability An indication of how easy it will be to see this risk event coming before it actually occurs. 1=high (can see the event well in advance) 3=medium (can see the event just before it happens) 5=low (can see the event as it happens or after it happens) Priority Determined by criteria set on Priority Chart tab Status Active (being worked), Observe, Closed To add more rows, copy and insert formatted rows. Note: Values for Probability and Impact Score are derived from the Risk Management Plan Template Source http://www.cvr-it.com Copyright CVR/IT Consulting 2006.May be used freely for non commercial purposes. For commercial uses, contact info@cvr-it.com