Skip to content
Skip to the tool
  1. 1Stage 1
  2. 2Stage 2
  3. 3Stage 3
← All tools

Enterprise Risk Register

Business analysisFinance and risk

Reference model

Enterprise Risk Register ComponentsA canvas of 6 boxes laid out on a grid of 3 columns and 3 rows: Risk ID, Risk Description, Likelihood, Impact, Risk Rating, Mitigation Strategy.Risk IDUnique identifier for each risk.Risk DescriptionBrief description of the risk.LikelihoodProbability of the riskoccurring.ImpactPotential impact on theorganization if the risk occurs.Risk RatingCombined score of likelihood andimpact.Mitigation StrategyActions to reduce the risk.

The Enterprise Risk Register is a living document that evolves as new risks are identified and existing risks are managed.

About this model

A systematic approach to identifying, assessing, and managing risks that may affect the achievement of organizational objectives.

Originator not stated.

How to read it

  • Review the risk descriptions to understand potential threats.
  • Focus on the risk ratings to prioritize mitigation efforts.

What this does

Tracks and prioritizes risks to the organization, helping to ensure that potential threats are managed effectively.

When to use it

Use it when you need to identify, assess, and monitor risks that could impact your organization’s objectives.

Not when: Do not use it when risks are not clearly defined or when there is no plan to mitigate them.

What happens next

Develop a risk mitigation plan based on the prioritized risks identified in the register.

Golden thread

Builds on ←

  • Risk identification
  • Risk assessment

Feeds into →

  • Risk mitigation plan

Use this tool, free

Sign in to open the worksheet. Your work saves as you type, the AI can draft the parts you have not filled in, and you finish with an analysis and a 30/60/90-day action plan.

Sign inCreate a free account

Drafted with AI and reviewed by Eccellere on 04/11/2026. Guidance, not advice: apply your own judgement.