Risk register starter
A worked example and blank rows for assets, risk scenarios, controls and treatment decisions.
Describe a scenario, not just a threat
Connect an asset, a threat event, a weakness and a business consequence. “Ransomware” alone does not explain what is at risk or why it matters.
Record an accountable decision
Use a consistent likelihood and impact scale agreed by your organisation. Record existing controls, residual risk, a treatment owner, an action and a review date. The template uses an illustrative 1–5 scale; adapt it to your methodology.
Adapt the resource to your organisation’s scope, risk methodology, policies and applicable requirements. Examples are fictional and intended for learning.
Created by CyberJA Academy. Free for personal learning and internal use. Do not enter sensitive organisational information into the assessment.