Risk Register

The risk register is a living document that evolves as the project progresses. Each risk entry includes a description, category, probability, impact, risk score (probability × impact), planned response strategy, risk owner, and triggers. Risk response strategies for negative risks include avoid, mitigate, transfer, and accept. For positive risks (opportunities): exploit, enhance, share, and accept. The risk register is reviewed regularly in risk review meetings and is a key input to change management, status reporting, and lessons learned.