[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-242067-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-242067-en":126},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","sample-completed-risk-register-guidance","Sample Completed Risk Register - guidance","","Sample Completed Risk Register provides guidance for developing an organisation’s Risk Management System and maintaining a Risk Register. It follows a framework recommended by the Charities Regulator and is intended for non-profit organisations to adapt. Risks are grouped into seven key risk areas, with each entry describing potential risk, impact, a Risk Owner, mitigation steps, monitoring frequency, and ratings for likelihood, impact, and controls to calculate an overall risk score.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/forms/","Forms",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/sample-completed-risk-register-guidance/242067/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/sample-completed-risk-register-guidance/242067.png","ImageObject",442,249,{"name":42,"@type":43},"Mimi","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-12","2026-09-12",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",11,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"How are risks grouped in this risk register?","Question",{"text":63,"@type":64},"Risks are grouped under seven key risk areas: Governance, Strategic, Compliance, Operational, Financial, Environmental or External, and Reputational.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"How is the overall risk score calculated?",{"text":68,"@type":64},"The risk score is determined by multiplying risk impact by risk likelihood and the effectiveness of the controls: (Likelihood x Impact) x Controls.",{"name":70,"@type":61,"acceptedAnswer":71},"What does the Risk Committee do in relation to the risk register?",{"text":72,"@type":64},"The Risk Committee oversees preparation and regular updates of the risk register, monitors risks, and regularly reviews and assesses the highest risks to decide whether new or additional mitigation or control steps are needed.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},242067,1789185356,{"code":4,"msg":82,"data":83},"success",[84,88,93,98,103,108,112,117,122],{"id":55,"doc_module":22,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Presentations",90,"presentations",{"id":89,"doc_module":22,"doc_module_name":25,"category_name":90,"show_sort_weight":91,"slug":92},12,"Resumes",80,"resumes",{"id":94,"doc_module":22,"doc_module_name":25,"category_name":95,"show_sort_weight":96,"slug":97},14,"Invoices",70,"invoices",{"id":99,"doc_module":22,"doc_module_name":25,"category_name":100,"show_sort_weight":101,"slug":102},15,"Posters",60,"posters",{"id":104,"doc_module":22,"doc_module_name":25,"category_name":105,"show_sort_weight":106,"slug":107},16,"Social Media",50,"social-media",{"id":109,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":110,"slug":111},17,40,"forms",{"id":113,"doc_module":22,"doc_module_name":25,"category_name":114,"show_sort_weight":115,"slug":116},18,"Letters",30,"letters",{"id":118,"doc_module":22,"doc_module_name":25,"category_name":119,"show_sort_weight":120,"slug":121},21,"Paper Templates",5,"papers-templates",{"id":123,"doc_module":22,"doc_module_name":25,"category_name":124,"show_sort_weight":4,"slug":125},158,"General","general-158",{"code":4,"msg":82,"data":127},{"doc_id":79,"user_id":128,"nickname":42,"user_avatar":129,"doc_module":22,"category_id":109,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":94,"language":135,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":12,"update_tm":80,"read_time":120},2336477974920,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","Sample Completed Risk Register  \nThere are a number of approaches and frameworks for developing an organisation’s Risk Management System and Risk Register. This document reflects the framework recommended by the Charities Regulator, though any non-profit may find it useful. This document is intended for guidance only and all organisations should develop their own Risk Management System and Risk Register.  \nIntroduction  \nThe identified risks are grouped under 7 key risk areas.  \nKey Risk Areas  \n1. Governance (G)  \n2. Strategic (S)  \n3. Compliance (legal & regulatory) (C)  \n4. Operational (O)  \n5. Financial (F)  \n6. Environmental or External (E)  \n7. Reputational (R)  \nEach risk on the register is given a brief description of the potential risk for the organisation and the potential impact if the risk was to occur. Each risk is also assigned a Risk Owner who has oversight responsibility for monitoring the risk and the implementation/ review of the steps to be taken to mitigate the likelihood of the risk occurring or if it does occur, the impact on the organisation. The monitoring frequency is specified and the risk owner needs to ensure that this monitoring occurs.  \nEach of the risks are assessed in terms of (1) likelihood of the risk occurring on a scale of 1 – 5 where 1 is very unlikely and 5 is very likely; (2) the impact for the Organisation if the risk was to happen also rated on a scale of 1-5 and (3) the controls in place or steps to be taken to mitigate the risk. The controls are rated of a scale of 1 to 3 where 1 it is felt that the controls are very effective and 3 an assessment that the controls or steps are not very strong and/or likely to be effective in preventing the risk or the mitigating its impact if it did occur. The risk score is determined by multiplying the risk impact by the risk likelihood by the effectiveness of the controls. (Likelihood X Impact) X Controls.  \nThe following traffic light system is used on a risk register to highlight / prioritise risk:  \n\n| Risk Level | Risk Score |\n| --- | --- |\n| High | 25+ |\n| Medium | 13 – 24 |\n| Low | 0 – 12 |\n\nThe Risk Committee oversees the preparation and regular update of the risk register, the monitoring of risks and the regular review and assessment of the Highest Risks to determine if any new or additional steps to mitigate or control the risk should be implemented. The Risk No Column can be colour coded to reflect the Risk Score, for example:  \n\n| Risk No | Description of Potential Risk | Description of Potential Impact | Risk Owner | Steps to Mitigate | Monitoring Frequency | Likelihood\u003Cbr>(1-5) | Impact (1-5) | Controls (1-3) | Risk Rating |\n| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |\n| F1 | Dependency on a limited number of income/funding sources | Cash flow and budget impact of loss of income source | CEO | 􀁸 Identify major funding/income source dependencies\u003Cbr>􀁸 Implement adequate reserves policy | Annual review of the risk by the Risk Committee reporting to the board. The review will assess;\u003Cbr>􀁸 Adequacy of reserves to sustain an income shock\u003Cbr>􀁸 Opportunities for income diversification or to develop additional income sources | 3 | 4 | 2 | 24 |\n\nRisk Register  \n\n| Risk No | Description of Potential Risk | Description of Potential Impact | Risk Owner | Steps to Mitigate | Monitoring Frequency | Likelihood\u003Cbr>(1-5) | Impact (1-5) | Controls (1-3) | Risk Rating |\n| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |\n|  |  |  |  | Risk Category: Governa | nce |  |  |  |  |\n| G1 | Board lacks relevant skills or commitment to meet its responsibilities and duties | 􀁸 The Organisation becomes moribund or fails to achieve its purpose\u003Cbr>􀁸 Oversight and guidance of the organisation is inadequate\u003Cbr>􀁸 Key decisions are made that bypass the Board\u003Cbr>􀁸 Attendance by board meetings is poor and difficulties in getting | Chairperson | 􀁸 Conduct regular board skills auditsand agree skills required\u003Cbr>􀁸 Develop and review annually a board","cbCaih5fQ40Ahgrz","https://ap.wps.com/l/cbCaih5fQ40Ahgrz","pdf",555125,"English","# Introduction\n## Key Risk Areas\n## Risk Assessment Methodology\n## Traffic Light Risk Rating\n## Risk Committee Oversight\n# Risk Register","[{\"question\":\"How are risks grouped in this risk register?\",\"answer\":\"Risks are grouped under seven key risk areas: Governance, Strategic, Compliance, Operational, Financial, Environmental or External, and Reputational.\"},{\"question\":\"How is the overall risk score calculated?\",\"answer\":\"The risk score is determined by multiplying risk impact by risk likelihood and the effectiveness of the controls: (Likelihood x Impact) x Controls.\"},{\"question\":\"What does the Risk Committee do in relation to the risk register?\",\"answer\":\"The Risk Committee oversees preparation and regular updates of the risk register, monitors risks, and regularly reviews and assesses the highest risks to decide whether new or additional mitigation or control steps are needed.\"}]","Sample Completed Risk Register - guidance | PDF"]