Free register template

Risk register template

A risk register lists the hazards and business risks your organization knows about, how likely and how serious each one is, what is already done to control it, and who owns it. Reviewing it on a schedule shows whether the controls still work and which risks need more action before something goes wrong.

Updated November 2026 · PDF, Word and CSV · Free to use, don’t resell

Download PDF Use it in Wikidoc ↓

Check this template against your local regulations and your own policies before you use it.

Business
Kept by
Last reviewed

One row per risk. Risk owner: the person responsible for it.
Status: Open, Controls in place or Closed.
Likelihood: Rare, Unlikely, Possible, Likely or Almost certain.
Consequence: Insignificant, Minor, Moderate, Major or Severe.
Risk rating: Low, Medium, High or Extreme.
In Wikidoc, whoever is in Risk owner is reminded on their Home page before Next review (30 days ahead).

Risk or hazard	Category	What could happen	Likelihood	Consequence	Risk rating	Current controls	Risk owner	Next review

Common questions

What should a risk register include?

At least the risk, what could happen, how likely and how serious it is, the resulting rating, the controls in place, who owns it and when it's next reviewed. Many registers also record further action and the rating once that action is done.

How do you calculate a risk rating?

Most businesses use a 5 × 5 matrix. Find the row for likelihood (rare to almost certain) and the column for consequence (insignificant to severe), and the cell where they meet gives the rating, from low to extreme. If your organization or regulator has its own matrix, use that one.

How often should a risk register be reviewed?

Set a review date for each risk, sooner for higher ratings, and review a risk again after an incident, a near miss or a change such as new equipment or a new site. A work health and safety regulator or insurer may expect a set schedule; check your local rules.

Does keeping a risk register make my business compliant?

No. A register is a record of how you manage risk, not proof of compliance. What the law expects depends on your country and industry, so check with your regulator or an adviser.

Can I keep the risk register in Wikidoc?

Yes, on the Team plan. Get started opens a Risks register with these fields and statuses, which you can change. Each risk's owner is reminded on their Home page 30 days before its next review.

Risk register template

How to use this template

Use it in Wikidoc

Open it in Wikidoc

Make the fields yours

Get reminded on Home

Related templates

Health and safety induction checklist

Incident register template

Contractor register template

30-60-90 day plan template

Annual compliance review checklist

Approval process flowchart template

Common questions

What should a risk register include?

How do you calculate a risk rating?

How often should a risk register be reviewed?

Does keeping a risk register make my business compliant?

Can I keep the risk register in Wikidoc?

Run your checklists and SOPs in one place