RISK REGISTER TEMPLATE		
 About			
A risk register is a framework for identifying, assessing and recording the risks that your organisations faces.

This example risk register has been produced exclusively for NCVO members. It can be used with our step-by-step risk management guide on NCVO Knowhow Nonprofit:		
How-to manage risk		
Use this template as a starting point for your own risk register and adapt it for your organisation.

We've filled in some sections of the register to give you an idea of how to use it. You can delete these examples and fill in your own risks.		
 Making changes to the template		
By default, some parts of this template are locked to stop changes from accidentally being made to formulae and formatting. To unprotect locked cells and make changes to the layout and structure of the register, follow the instructions below.
In Excel 2010

On the Review tab above, click Unprotect sheet
Enter the password ncvo-risk-reg
Click OK

In Excel 2003

Choose Tools: Protection: Unprotect Workbook
Enter the password ncvo-risk-reg
Click OK		

This template is available exclusively to NCVO members at	
www.knowhownonprofit.org 	

Identify your risks.

Analyse your risks by scoring the likelihood of them happening and the potential impact.

Think about your appetite for these risks. Give each one a target risk score that reflects the level of risk you’d be happy to accept.

List the controls that you currently have in place to reduce and control each risk.

Rescore the likelihood and potential impact of each risk with the controls in place.

If your residual risk score is higher than your target risk score (ie current controls don't reduce the risk to a level you're happy with), list the additional actions needed to reduce the risk further.

For ongoing assurance that risks are being controlled effectively, record who is responsible for each risk and when/how they should review it.

Risk	

Unmanaged conflicts of interest	
Breach of constitution	
Not able to support/manage chief executive	
Difficulty recruiting/retaining board
members	

	

	

	

 

Likelihood (1–5)	
Impact (1–5)	
Initial risk score	

3	
4	
12	

			

			

			

			

 

Target risk score	

7	

	

	

	

	

 

Current controls	

Agreed protocol for disclosure of potential conflicts of interest	

	

	

	

	

 
Likelihood after controls
(1–5)	Impact after controls (1–5)	
Residual risk score	

3	
2	
6	

			

			

			

			

 

Actions required	
Put in place procedures for standing down on certain decisions
Review recruitment and selection processes	

	

	

	

	

 

Risk owner	
Review (timeframe and process)	

Chair	
Annual review of protocol document	

		

		

		

		

Identify your risks.

Analyse your risks by scoring the likelihood of them happening and the potential impact.

Think about your appetite for these risks. Give each one a target risk score that reflects the level of risk you’d be happy to accept.

List the controls that you currently have in place to reduce and control each risk.

Rescore the likelihood and potential impact of each risk with the controls in place.

If your residual risk score is higher than your target risk score (ie current controls don't reduce the risk to a level you're happy with), list the additional actions needed to reduce the risk further.

For ongoing assurance that risks are being controlled effectively, record who is responsible for each risk and when/how they should review it.

Risk	

	

	

	

	

 

Likelihood (1–5)	
Impact (1–5)	
Initial risk score	

			

			

			

			

 

Target risk score	

	

	

	

	

 

Current controls	

	

	

	

	

 
Likelihood after controls
(1–5)	Impact after controls (1–5)	
Residual risk score	

			

			

			

			

 

Actions required	

	

	

	

	

 

Risk owner	
Review (timeframe and process)	

		

		

		

		

Identify your risks.

Analyse your risks by scoring the likelihood of them happening and the potential impact.

Think about your appetite for these risks. Give each one a target risk score that reflects the level of risk you’d be happy to accept.

List the controls that you currently have in place to reduce and control each risk.

Rescore the likelihood and potential impact of each risk with the controls in place.

If your residual risk score is higher than your target risk score (ie current controls don't reduce the risk to a level you're happy with), list the additional actions needed to reduce the risk further.

For ongoing assurance that risks are being controlled effectively, record who is responsible for each risk and when/how they should review it.

Risk	

	

	

	

	

 

Likelihood (1–5)	
Impact (1–5)	
Initial risk score	

			

			

			

			

 

Target risk score	

	

	

	

	

 

Current controls	

	

	

	

	

 
Likelihood after controls
(1–5)	Impact after controls (1–5)	
Residual risk score	

			

			

			

			

 

Actions required	

	

	

	

	

 

Risk owner	
Review (timeframe and process)	

		

		

		

		

Identify your risks.

Analyse your risks by scoring the likelihood of them happening and the potential impact.

Think about your appetite for these risks. Give each one a target risk score that reflects the level of risk you’d be happy to accept.

List the controls that you currently have in place to reduce and control each risk.

Rescore the likelihood and potential impact of each risk with the controls in place.

If your residual risk score is higher than your target risk score (ie current controls don't reduce the risk to a level you're happy with), list the additional actions needed to reduce the risk further.

For ongoing assurance that risks are being controlled effectively, record who is responsible for each risk and when/how they should review it.

Risk	

	

	

	

	

 

Likelihood (1–5)	
Impact (1–5)	
Initial risk score	

			

			

			

			

 

Target risk score	

	

	

	

	

 

Current controls	

	

	

	

	

 
Likelihood after controls
(1–5)	Impact after controls (1–5)	
Residual risk score	

			

			

			

			

 

Actions required	

	

	

	

	

 

Risk owner	
Review (timeframe and process)	

		

		

		

		

Identify your risks.

Analyse your risks by scoring the likelihood of them happening and the potential impact.

Think about your appetite for these risks. Give each one a target risk score that reflects the level of risk you’d be happy to accept.

List the controls that you currently have in place to reduce and control each risk.

Rescore the likelihood and potential impact of each risk with the controls in place.

If your residual risk score is higher than your target risk score (ie current controls don't reduce the risk to a level you're happy with), list the additional actions needed to reduce the risk further.

For ongoing assurance that risks are being controlled effectively, record who is responsible for each risk and when/how they should review it.

Risk	

	

	

	

	

 

Likelihood (1–5)	
Impact (1–5)	
Initial risk score	

			

			

			

			

 

Target risk score	

	

	

	

	

 

Current controls	

	

	

	

	

 
Likelihood after controls
(1–5)	Impact after controls (1–5)	
Residual risk score	

			

			

			

			

 

Actions required	

	

	

	

	

 

Risk owner	
Review (timeframe and process)