# Risk register · [Product or portfolio] **Register owner:** [Name] **Top risks reviewed:** monthly **Full review:** quarterly **Last full review:** [Date] | ID | Risk statement (Because [cause], [event] may happen, which would [consequence]) | Category | AI RMF function (Govern / Map / Measure / Manage), if AI | Likelihood (H/M/L) | Impact (H/M/L) | Owner | Mitigations in place | Mitigations planned | Early indicator | Escalation threshold, and to whom | Status | Last reviewed | |---|---|---|---|---|---|---|---|---|---|---|---|---| | R-001 | | | | | | | | | | | | | Categories: customer, security, AI behavior, regulatory, commercial, delivery, dependency, people. ## Dated triggers (regulatory and contractual) | Date | Obligation or event | Affected risk IDs | Owner | Readiness | |---|---|---|---|---| | | | | | | ## Closed risks | ID | Closed on | Why (mitigated / occurred / no longer relevant) | Lesson | |---|---|---|---| | | | | |