ToolDoxTemplates

Risk template

Risk Register Excel Template

A practical risk register with likelihood, impact, inherent score, current controls, residual score, treatment plan, owner, deadline, and insurance relevance.

Download CSV templateUse in workflowAll templates

Who it is for

Risk managers, brokers, consultants, finance teams, founders, and project owners who need a clear operational risk log.

Best use cases

  • Board risk reviews
  • Insurance renewal preparation
  • Project risk management
  • Cyber risk planning
  • Control improvement tracking

Related workflow

Used in: Business Risk Cost Workflow

Use this register to collect risk inputs before estimating exposure categories, cost pressure, and insurance data needs.

Feeds into tools

Risk Exposure Estimator
Convert risk rows into property, liability, cyber, fleet, and workforce exposure prompts.
Business Risk Cost Estimator
Use scored risks to support cost and priority assumptions.

Template fields and structure

The starter structure is designed to work in Excel, Google Sheets, Power BI, insurer portals, internal trackers, or client-facing documents.

risk_idrisk_titlecategoryownerlikelihoodimpactinherent_scorecurrent_controlsresidual_scoretreatment_plantarget_date

Copyable CSV / spreadsheet structure

risk_id,risk_title,category,owner,likelihood,impact,inherent_score,current_controls,residual_score,treatment_plan,target_date
R-001,Supplier outage affects fulfilment,Operational,COO,4,5,20,Dual supplier for top SKUs,12,Test fallback supplier and update business interruption assumptions,2026-08-15

Example filled row

Use the example as a quality benchmark for how specific each row should be before the file is used in a workflow or tool.

risk_idrisk_titlecategoryownerlikelihoodimpactinherent_scorecurrent_controlsresidual_scoretreatment_plantarget_date
R-001Supplier outage affects fulfilmentOperationalCOO4520Dual supplier for top SKUs12Test fallback supplier and update business interruption assumptions2026-08-15

How to use it

  1. List each material risk as a separate row with a named owner.
  2. Score inherent risk before controls and residual risk after controls.
  3. Use the treatment plan to track what will reduce likelihood or impact.
  4. Review insurance relevance before renewal so risk controls and coverage match.

What a completed version should prove

OKEach risk has a named owner, score, controls, treatment plan, and review date.
OKHigh residual risks are connected to insurance, operational controls, or executive action.
OKThe register can explain why a risk is accepted, reduced, transferred, or monitored.

Common mistakes to avoid

!Listing vague risks such as “cyber risk” without a cause, impact, or owner.
!Scoring every risk as high without evidence or prioritisation.
!Treating insurance relevance as an afterthought instead of linking risks to coverage review.

Use this with

Related guides

Frequently asked questions

What score scale should I use?

A simple 1 to 5 likelihood and 1 to 5 impact scale is usually enough. Multiply them for a practical priority score.

Is this only for insurance?

No. It works for operational, project, cyber, financial, and compliance risks, with an extra column to connect risks to insurance discussions.