Template · September 2026

Risk Register Template

A ready-to-use risk register structured around the ten categories of INA's Project Risk Assessment Framework™ (F5), with worked examples for each.

01
Overview

How to Use This Register

Copy the table below into your own project tracker at Phase II and keep it live through Phase V — a risk register that stops updating after the Business Case is signed isn't a risk register, it's an archive. Score Probability and Impact independently as Low/Medium/High, assign a single named owner per risk, and review the full register at every gate.

Status Legend

  • Open — identified, mitigation not yet in place
  • Mitigating — mitigation actions in progress
  • Closed — risk no longer applies or is fully mitigated
02
Template

Register by Category

CategoryRiskProbabilityImpactOwnerPrimary MitigationStatus
StrategicProject no longer aligned with sponsor's current prioritiesLowHighExecutive SponsorAlignment re-confirmed at every gate, not only at kickoffOpen
RegulatoryPermitting or spectrum approval delayed beyond scheduleMediumHighLegal CounselRegulatory filings started in Phase II, ahead of technical design closeMitigating
TechnicalChosen technical architecture doesn't scale to projected demandLowHighTechnical CommitteeIndependent technical peer review before Gate 2Open
FinancialActual cost exceeds the Business Case estimateMediumHighPMO & Finance LeadCost model benchmarked externally before financial closeMitigating
MarketDemand assumptions don't hold once the service launchesMediumMediumCommercial LeadDemand study refreshed at Gate 2 with independent dataOpen
CounterpartyKey vendor's financial or delivery capacity in doubtLowHighPMOFinancial due diligence on shortlisted vendors before awardClosed
OperationalOperating team not ready to run the delivered systemMediumMediumPMOChange management plan started in Phase III, not after deliveryMitigating
Environmental & SocialConstruction impacts unaddressed community or environmental concernsLowHighTechnical CommitteeEnvironmental and social screening completed before Gate 3Open
GovernanceDecision authority unclear once implementation startsMediumMediumSteering CommitteeRACI Matrix signed off before Gate 3, reviewed at each gateClosed
ClimatePhysical assets exposed to flooding, heat or storm intensificationLowHighTechnical CommitteeClimate exposure screening included in site/route selectionOpen
03
Discipline

Keeping It Alive Through the Lifecycle

At Every Gate

  1. Re-score every open risk — don't just add new ones
  2. Close risks that no longer apply, with a one-line reason
  3. Escalate any High/High risk without a named owner to the Steering Committee

Common Mistakes

  • Treating the register as a Phase II artifact instead of a living document
  • Scoring risk without a named, accountable owner
  • Leaving AI-agent-flagged anomalies out of the register entirely
Next Step

Pair this register with INA's Project Structuring Framework™ Toolkit, or request a facilitated risk workshop. Request Advisory →