ERM glossary

Risk register

سجل المخاطر قائمة موثّقة بالمخاطر ودرجاتها وضوابطها وإجراءاتها.

A risk register is the documented list of an organisation's risks, each with its owner, scores, controls and treatment actions. It is the single source of truth for a risk program.

A good register records both inherent risk and residual risk, links each risk to internal controls and actions, and feeds the risk heat map. You can start one in a spreadsheet and grow into dedicated software.

Related terms

See it in Rukn ERM

Rukn ERM puts risk register to work in a live, mobile, bilingual risk program — aligned to COSO ERM 2017.

Start free trial Risk register software