← Back to topic library
Responsible Tech MaxxingIntermediateRisk Management75 sec
Risk register
A risk register is a maintained record listing a system's identified risks, their likelihood and severity, and the status of any mitigation for each.
Prerequisite: Risk tolerance
What matters
Keeping risks documented in one place prevents known issues from being forgotten or rediscovered from scratch every time a new person reviews the system.
Example
A risk register entry might list 'model underperforms for one language', its estimated severity, and note that a mitigation is currently in progress.
Common misconception
A risk register is not a one-time document written at launch and forgotten; it needs to be actively maintained and revisited as the system and its context change.
Recall question
What problem does maintaining a risk register over time help prevent?
Keywords and related concepts
risk registerdocumentationrisk trackingrisk tolerance