Documents
Resources
Learning Center
Upload
Plans & pricing Sign in
Sign Out

Risk Register Maker

VIEWS: 5 PAGES: 14

									Risk Register Format generator

There are so many design options for a risk register that putting just one on my website seemed
insufficient.

This spreadsheet, therefore, gives you a quick way to generate a wide range of designs within the usual
style. You just read through a list of columns you could use and mark the ones you want. Then click on
a button at the top of the page and instantly your format is created on the 'format' worksheet. It does
headings centered across sub-headings, draws borders, and even inserts explanation as Comments on
the heading cells.

Here are the steps to take:

1. Turn to the 'spec' (i.e. specification) worksheet and take a look. Put a 'Y' in the Use? column
wherever you want to use that column heading. Otherwise make sure there isn't a Y in there. I've
already marked a good set of choices, though you may not agree with me.

2. When you're done click on the 'Make new register format' button at the top.

3. Turn to the 'format' worksheet and adjust the row heights (because Excel doesn't do it very well). Add
headings for things like 'department', 'project', or 'topic'.

4. Put a copy of the 'format' worksheet somewhere else because if you click on the 'Make new register
format' button again any changes you've made (e.g. page headings) are wiped out.

5. You will also need to choose rows and columns to appear on each page when the matrix is printed,
and apply appropriate freeze panes to get a good view when scrolling about on the screen. Many good
risk register designs are too big to print on A4 paper so you have to select the print area appropriate to
the reason for producing a hard copy.

6. The 'To Do' column on the 'spec' worksheet mentions things you will need to define in order to use
your new risk register.


You'll probably want to look at various versions, especially if you are discussing alternatives with other
people, and this tool makes that easy. In fact you'll probably end up doing vastly more versions than you
ever thought you might, and that's why the spreadsheet is designed the way it is.

Feel free to add rows to the 'spec' table.
Order   Title                                      Sub-title                      Use? Width
    1   Ref                                        Ref                            Y         4
    2   Classification                             Category                       Y       10
    3   Classification                             Sub-category                           10
    4   Description                                Definition                     Y       25
    5   Description                                Variable                               15
    6   Description                                Range                                  10
    7   Description                                Causes                                 20
    8   Description                                Timing                         Y       15
    9   Risk assessment (no controls)              Consequences                           20
   10   Risk assessment (no controls)              Range                                  10
   11   Risk assessment (no controls)              Probability                              8
   12   Risk assessment (no controls)              Mean impact                              8
   13   Risk assessment (no controls)              Prob. impact > 0                         8
   14   Risk assessment (no controls)              Prob. Impact > threshold 1               8
   15   Risk assessment (no controls)              Prob. Impact > threshold 2               8
   16   Risk assessment (no controls)              Prob. Impact > threshold 3               8
   17   Risk assessment (no controls)              Risk magnitude summary rating            6
   18   Risk assessment (no controls)              Max. WTP                                 6
   19   Risk assessment (no controls)              Mgmt. level for WTP                      6
   20   Risk assessment (no controls)              Max. WTP                                 6
   21   Risk assessment (no controls)              Evidence for risk assessment           15
   22   Risk assessment (no controls)              Evidence rating for risk assessment      6
   23   Roles                                      Risk owner                             12
   24   Roles                                      Accountable for risk           Y       12
   25   Roles                                      Responsible for risk                   12
   26   Existing controls                          Research                               30
   27   Existing controls                          Monitoring                             15
   28   Existing controls                          Preventive                             15
   29   Existing controls                          Contingent                             15
   30   Existing controls                          Other controls                         30
   31   Existing controls                          Controls                       Y       20
   32   Existing controls                          Risk responses                         20
   33   Existing controls                          Control owner                  Y       12
   34   Existing controls                          Accountable for control                12
   35   Existing controls                          Responsible for control                12
   36   Risk assessment (with existing controls)   Consequences                           20
   37   Risk assessment (with existing controls)   Range                                  10
   38   Risk assessment (with existing controls)   Probability                              8
   39   Risk assessment (with existing controls)   Mean impact                              8
   40   Risk assessment (with existing controls)   Prob. impact > 0                         8
   41   Risk assessment (with existing controls)   Prob. Impact > threshold 1               8
   42   Risk assessment (with existing controls)   Prob. Impact > threshold 2               8
   43   Risk assessment (with existing controls)   Prob. Impact > threshold 3               8
   44   Risk assessment (with existing controls)   Risk magnitude summary rating            6
   45   Risk assessment (with existing controls)   Max. WTP                                 6
   46   Risk assessment (with existing controls)   Mgmt. level for WTP            Y         6
   47   Risk assessment (with existing controls)   Max. WTP                       Y         6
   48   Risk assessment (with existing controls)   Evidence for risk assessment Y         15
   49   Risk assessment (with existing controls)   Evidence rating for risk assessment      6
   50   Agreed controls                            Research                               30
   51   Agreed controls                            Monitoring                             15
   52   Agreed controls                            Preventive                             15
   53   Agreed controls                            Contingent                             15
 54   Agreed controls                            Other controls                        30
 55   Agreed controls                            Controls                       Y      20
 56   Agreed controls                            Risk responses                        20
 57   Agreed controls                            Control owner                  Y      12
 58   Agreed controls                            Accountable for control               12
 59   Agreed controls                            Responsible for control               12
 60   Agreed controls                            Implement-ation date           Y      12
 61   Agreed controls                            Implementation progress        Y      20
 62                                              Consequences
      Risk assessment (with existing & agreed controls)                                20
 63                                              Range
      Risk assessment (with existing & agreed controls)                                10
 64                                              Probability
      Risk assessment (with existing & agreed controls)                                 8
 65                                              Mean
      Risk assessment (with existing & agreed controls) impact                          8
 66                                              Prob.
      Risk assessment (with existing & agreed controls) impact > 0                      8
 67                                              Prob.
      Risk assessment (with existing & agreed controls) Impact > threshold 1            8
 68                                              Prob.
      Risk assessment (with existing & agreed controls) Impact > threshold 2            8
 69                                              Prob.
      Risk assessment (with existing & agreed controls) Impact > threshold 3            8
 70                                              Risk
      Risk assessment (with existing & agreed controls)magnitude summary rating         6
 71                                              Max.
      Risk assessment (with existing & agreed controls) WTP                             6
 72                                              Mgmt.
      Risk assessment (with existing & agreed controls) level for WTP           Y       6
 73                                              Max.
      Risk assessment (with existing & agreed controls) WTP                     Y       6
 74                                              Evidence for risk assessment Y
      Risk assessment (with existing & agreed controls)                                15
 75                                              Evidence rating for risk assessment
      Risk assessment (with existing & agreed controls)                                 6
 76   Proposed controls                          Research                       Y      30
 77   Proposed controls                          Monitoring                     Y      15
 78   Proposed controls                          Preventive                     Y      15
 79   Proposed controls                          Contingent                     Y      15
 80   Proposed controls                          Other controls                 Y      30
 81   Proposed controls                          Controls                              20
 82   Proposed controls                          Risk responses                        20
 83   Proposed controls                          Control owner                  Y      12
 84   Proposed controls                          Accountable for control               12
 85   Proposed controls                          Responsible for control               12
 86   Proposed controls                          Implement-ation date           Y      12
 87   Risk assessment (with all controls)        Consequences                          20
 88   Risk assessment (with all controls)        Range                                 10
 89   Risk assessment (with all controls)        Probability                            8
 90   Risk assessment (with all controls)        Mean impact                            8
 91   Risk assessment (with all controls)        Prob. impact > 0                       8
 92   Risk assessment (with all controls)        Prob. Impact > threshold 1             8
 93   Risk assessment (with all controls)        Prob. Impact > threshold 2             8
 94   Risk assessment (with all controls)        Prob. Impact > threshold 3             8
 95   Risk assessment (with all controls)        Risk magnitude summary rating          6
 96   Risk assessment (with all controls)        Max. WTP                               6
 97   Risk assessment (with all controls)        Mgmt. level for WTP            Y       6
 98   Risk assessment (with all controls)        Max. WTP                       Y       6
 99   Risk assessment (with all controls)        Evidence for risk assessment Y        15
100   Risk assessment (with all controls)        Evidence rating for risk assessment    6
To Do

Define categories to use.
Define sub-categories to use.




Define threshold 1
Define threshold 2.
Define threshold 3.
Define available values.

Define risk metric(s) used to state level of management for which WTP statements are made.


Define available ratings.




Define threshold 1
Define threshold 2.
Define threshold 3.
Define available values.

Define risk metric(s) used to state level of management for which WTP statements are made.


Define available ratings.
Define threshold 1
Define threshold 2.
Define threshold 3.
Define available values.

Define risk metric(s) used to state level of management for which WTP statements are made.


Define available ratings.




Define threshold 1
Define threshold 2.
Define threshold 3.
Define available values.

Define risk metric(s) used to state level of management for which WTP statements are made.


Define available ratings.
Description
A unique reference to identify each 'risk'.
Category of risk.
Sub-category of risk.
A description of the risk that clearly states what is included.
A definition of the underlying variable or group of variables that the risk concerns. E.g. "Insufficient funds" concerns the variable "fun
A definition of the range of values for the variable which are included in the risk. E.g. "Insufficient funds" concerns the range "insuffi
A list of causes/drivers of the risk.
When the risk will be significant; e.g. could be 'ongoing', only after a period, or not after a period.
A list of consequences of the risk.
Text describing the range of outcomes with significant likelihood.
Probability of at least some impact from the risk.
Probability weighted average of the impact if non-zero (what is usually, and wrongly, just called 'Impact')
Risk Meter style: probability of zero impact.
Risk Meter style: probability of impact greater than threshold 1.
Risk Meter style: probability of impact greater than threshold 2.
Risk Meter style: probability of impact greater than threshold 3.
Risk impact summarised as one rating.
Maximum we would be Willing To Pay for complete management of the risk.
Level of management of risk for which WTP statement is made.
Maximum we would be Willing to pay for specified % of management.
Text describing the evidence supporting the assessments of inherent risk. Do not write 'experience'; at least name the source.
A rating of the strength of the evidence supporting the assessments of inherent risk.
Person/role responsible and accountable for the risk.
Person/role accountable for the risk (i.e. who will report on it).
Person/role responsible for the risk (i.e. ultimate responsibility for control of it).
Responses to risk that involve discovering soon more.
Responses to risk that involve monitoring.
Responses to risk that involve preventive actions.
Responses to risk that involve action only if the risk occurs.
All other types of risk response.
List of controls.
List of risk responses.
Person/role responsible and accountable for the control (s).
Person/role who accounts for the control(s).
Person/role who is responsible for the control(s).
A list of consequences of the risk.
Text describing the range of outcomes with significant likelihood.
Probability of at least some impact from the risk.
Probability weighted average of the impact if non-zero (what is usually, and wrongly, just called 'Impact')
Risk Meter style: probability of zero impact.
Risk Meter style: probability of impact greater than threshold 1.
Risk Meter style: probability of impact greater than threshold 2.
Risk Meter style: probability of impact greater than threshold 3.
Risk impact summarised as one rating.
Maximum we would be Willing To Pay for complete management of the remaining risk.
Level of management of risk for which WTP statement is made.
Maximum we would be Willing to pay for specified % of management of the remaining risk.
Text describing the evidence supporting the assessments of control risk. Do not write 'experience'; at least name the source.
A rating of the strength of the evidence supporting the assessments of inherent risk.
Responses to risk that involve discovering soon more.
Responses to risk that involve monitoring.
Responses to risk that involve preventive actions.
Responses to risk that involve action only if the risk occurs.
All other types of risk response.
List of controls.
List of risk responses.
Person/role responsible and accountable for the control (s).
Person/role who accounts for the control(s).
Person/role who is responsible for the control(s).
Target date for having the control(s) in place and ready to operate.
Text describing progress so far in implementing the control(s).
A list of consequences of the risk.
Text describing the range of outcomes with significant likelihood.
Probability of at least some impact from the risk.
Probability weighted average of the impact if non-zero (what is usually, and wrongly, just called 'Impact')
Risk Meter style: probability of zero impact.
Risk Meter style: probability of impact greater than threshold 1.
Risk Meter style: probability of impact greater than threshold 2.
Risk Meter style: probability of impact greater than threshold 3.
Risk impact summarised as one rating.
Maximum we would be Willing To Pay for complete management of the remaining risk.
Level of management of risk for which WTP statement is made.
Maximum we would be Willing to pay for specified % of management of the remaining risk.
Text describing the evidence supporting the assessments of control risk. Do not write 'experience'; at least name the source.
A rating of the strength of the evidence supporting the assessments of inherent risk.
Responses to risk that involve discovering soon more.
Responses to risk that involve monitoring.
Responses to risk that involve preventive actions.
Responses to risk that involve action only if the risk occurs.
All other types of risk response.
List of controls.
List of risk responses.
Person/role responsible and accountable for the control (s).
Person/role who accounts for the control(s).
Person/role who is responsible for the control(s).
Target date for having the control(s) in place and ready to operate.
A list of consequences of the risk.
Text describing the range of outcomes with significant likelihood.
Probability of at least some impact from the risk.
Probability weighted average of the impact if non-zero (what is usually, and wrongly, just called 'Impact')
Risk Meter style: probability of zero impact.
Risk Meter style: probability of impact greater than threshold 1.
Risk Meter style: probability of impact greater than threshold 2.
Risk Meter style: probability of impact greater than threshold 3.
Risk impact summarised as one rating.
Maximum we would be Willing To Pay for complete management of the remaining risk.
Level of management of risk for which WTP statement is made.
Maximum we would be Willing to pay for specified % of management of the remaining risk.
Text describing the evidence supporting the assessments of control risk. Do not write 'experience'; at least name the source.
A rating of the strength of the evidence supporting the assessments of inherent risk.
rns. E.g. "Insufficient funds" concerns the variable "funds"
k. E.g. "Insufficient funds" concerns the range "insufficient or less"




ongly, just called 'Impact')




 not write 'experience'; at least name the source.




ongly, just called 'Impact')




not write 'experience'; at least name the source.
ongly, just called 'Impact')




not write 'experience'; at least name the source.




ongly, just called 'Impact')




not write 'experience'; at least name the source.
                              Description


                                                     Accountable
Ref   Category   Definition                 Timing   for risk
           Existing controls              Risk assessment (with existing              Agreed controls
                                       Mgmt.
                                       level
                                       for      Max.  Evidence for risk
Controls                 Control owner WTP WTP assessment                  Controls
      Agreed controls                                Risk assessment (with existing &
                                                   Mgmt.
                                                   level
              Implement-                           for      Max.  Evidence for risk
Control owner ation date   Implementation progress WTP WTP assessment
                                     Proposed controls



Research   Monitoring   Preventive      Contingent
roposed controls                                                Risk assessment (with all controls)
                                                               Mgmt.
                                                               level
                                                  Implement-   for     Max.   Evidence for risk
                   Other controls   Control owner ation date   WTP WTP assessment

								
To top