Risk register templates

Worked example risk registers you can download as a spreadsheet or open live in Urna — each seeded from curated risk libraries, scored, and with a suggested remediation for every risk. Free, no sign-up to download.

Risk register template

A risk register is the single list your organisation keeps of what could go wrong, how serious each risk is, who owns it, and what you're doing about …

Open template →

Cybersecurity risk register template

A cybersecurity risk register records the security risks facing your organisation — phishing, ransomware, insider misuse, exposed cloud storage — each…

Open template →

AI risk register template

An AI risk register catalogues the risks that come with building or deploying AI — bias, drift, prompt injection, PII leakage, weak human oversight, r…

Open template →

Vendor risk register template

A vendor (third-party) risk register tracks the risk your suppliers carry into your organisation — a compromised vendor, a shared-service outage, sens…

Open template →

Shadow AI risk register template

Shadow AI is the unapproved AI tools staff use on work data — the biggest new source of uncontrolled risk in most organisations. This register capture…

Open template →

LLM & generative-AI risk register template

A register for the risks of large language models in production — prompt injection, hallucinated output relied upon, training-data leakage, insufficie…

Open template →

ISO 27001 risk register template

ISO 27001 Clause 6.1 requires a documented information-security risk assessment and treatment — a risk register is the artefact auditors look for. The…

Open template →

ISO 31000 risk register example

ISO 31000 is the general risk-management standard: identify risks, analyse likelihood and consequence, evaluate, treat, and review. The worked example…

Open template →

Data protection (GDPR) risk register template

A data-protection risk register records the risks to personal data — breaches, over-collection, sending data to external AI models, biased automated d…

Open template →

Electoral technology risk register template

A risk register for the technology and AI risks facing an election management body — from phishing and results-transmission interception to shadow AI …

Open template →