Skip to product information
1 of 3

Risk Register Template (Word)

Risk Register Template (Word)

$29

A ready-written document you adapt to your business. Instant download.

The risks that hurt a business are rarely a surprise. This risk register template makes you deal with them before they land.

Used properly, this is what it does for your business:

  • ✓More customers: deliveries kept and promises met, because the things that could let customers down are spotted and dealt with early.
  • ✓More profit: fewer costly surprises, from a supplier failing to a key person off sick.
  • ✓Less stress: the worries in the back of your mind written down, owned and acted on.
  • ✓Look the part: a clear written register to show any client, tender or insurer who asks how you manage risk.

Why not a free risk register template? Many are a blank spreadsheet with column headings and nothing to tell you how to score a risk, what to do about it or when to look again. This one includes the scoring guide, the response options, a worked example and a review log, written by a former company director of over 30 years.

Director-built, not auditor-built
Director-built, not auditor-built
Plain English, no jargon
Plain English, no jargon
Instant download, yours to keep
Instant download, yours to keep

"Plain Standards have continually under-promised and over-delivered. Outstanding service." Paul J, ATM Security

Ask any business owner what could go wrong and they can usually tell you: the supplier who is often late, the one person who knows how the invoicing works, the big customer who pays when it suits them. The trouble is that nobody writes it down, nobody owns it, and nothing changes until the day it goes wrong.

In over 30 years running companies at director level, I carried the P&L and managed the cashflow, so I learned to ask one question first: what could stop us getting paid? This template is the way I would set up a risk register in any business: a short list, scored the same way every time, with a name and an action against each risk, and a monthly look to check it still holds.

Who this is for

Any business or project manager who wants a clear, written view of what could go wrong and what is being done about it. It suits a building contractor, a design studio, a care provider, a charity, an IT team, a workshop or an office, and it works for a whole business or a single project. If a client, tender or insurer has asked how you manage risk, this gives you the answer in writing. You do not need any experience of risk management.

If you already own our ISO 9001:2026 Certification-Ready System, you do not need this template: its Risk and Opportunity Register does the same job inside your quality system.

View full details

This is a ready-made risk register template in Microsoft Word. It gives you everything you need to list the things that could go wrong in your business or project, decide which matter most, and make sure something is done about them.

It includes a cover with a reference number and sign-off; record details (what the register covers, who keeps it, how often it is reviewed); a scoring guide that rates how likely each risk is and how much harm it would do, each from 1 to 5, and tells you what each score means you should do; the register itself, with columns for what could go wrong and why, the effect on the business, the controls already in place and the scores; an action table with the owner, the response (reduce, accept, transfer or avoid), the action and due date, whether it worked, a new score and an open or closed status; an optional table for opportunities; a review log; and the key words explained.

It also comes with a removable Start here page, a short note on keeping a register people actually use, and a worked example you can copy: a building contractor fitting out a client's new office, with four real-world risks scored and acted on. One template, as many registers as you need: one for the whole business, or a fresh copy for each site or project.

A short list you will actually use

Long risk registers tend to get filed after the first meeting and forgotten. This one is built to stay short and stay current: ten real risks with a name against each one will do far more good than fifty that nobody reads.

Score every risk the same way

Rate how likely each risk is and how much harm it would do, each from 1 to 5, and multiply the two. The scoring guide spells out what every number means in everyday business terms, so two people scoring the same risk are far more likely to agree, and the score tells you whether to keep an eye on it, plan an action or act now.

Every risk gets an owner and a response

A risk with nobody's name against it tends to stay a risk. For each one you record who owns it and how you will respond: reduce it with an action, accept it, transfer it (for example by insurance or a contract), or avoid it by stopping the activity. Every action gets a due date.

Check the action worked

Writing down an action is not the same as dealing with the risk. The template asks you to check afterwards whether the action worked, give the risk a new score and mark it open or closed, so you can see the danger really coming down.

For a whole business or a single project

Use one register for the business, or a separate copy for each site or project. The worked example shows a project register in action: a building contractor fitting out a client's new office, with a subcontractor who might pull out, equipment that might arrive late, a client who might change the layout and the risk of a fall from height.

Ready if you ever go for certification

ISO 9001 asks a business to work out its risks and opportunities, judge how much each matters, act on them and check the actions worked (clause 6.1). This template covers each of those steps, with an optional section for opportunities. You do not need any of that to get value from it today.

Where this leads

Why buy from us

  • ✓Built by a company director, not an auditor. Written by someone who ran real businesses before building management systems, so what you get works in the real world, not just on paper.
  • ✓Written in plain English. No jargon, no clause-speak. If you are new to ISO 9001, it will make sense on day one.
  • ✓The Operator's Take, in every document. Look inside any Plain Standards document and you will find a boxed note called The Operator's Take: a short, plain comment from someone who has run businesses, explaining why this document actually matters to yours, and how to get real value from it, not just tick a box for an auditor. No other provider gives you this, because it comes from having sat in the chair.
  • ✓Honest, unaccredited, and clear about it. A genuine route to a working system, with no false claims and nothing hidden.

What is a risk register template?

A risk register template is a ready-made layout for listing the things that could go wrong in a business or project, scoring how likely and how harmful each one is, and recording who owns it and what is being done about it. Instead of starting from a blank page, you fill in your own risks under headings already in the right order.

Is there an Excel version of this risk register template?

No, it is a Word document. A small business risk register is usually a short list that people read, sign off and review together, and Word keeps the scoring guide, the example and the register in one place. If you prefer a spreadsheet, the column headings copy straight into Excel or Google Sheets.

Can I use it as a project risk register?

Yes. Make a fresh copy for each project, set what it covers on the record details page, and review it at each project meeting. The worked example inside is a project register: a building contractor fitting out a client's new office.

Does it work for construction?

Yes, the worked example is a building contractor, with risks such as a subcontractor pulling out, late equipment, client changes and working at height. It is a general risk register, so it sits alongside, not in place of, any site safety paperwork the law or your client requires.

Is this risk register template in Word?

Yes, it is a Microsoft Word file (.docx) that you download straight away and edit like any other Word document. It also opens in Google Docs and other word processors that read .docx files, though a few layout details may shift slightly outside Word.

Does it include an example?

Yes. A worked example shows four risks for a building contractor scored, owned and acted on, plus a check later in the project that showed one action had worked. Copy the pattern for your own risks, then delete the example.

Can I use it for IT and cyber security risks?

Yes, it works for listing and scoring IT risks such as a failed backup, a lost laptop or a phishing email. If you are working to ISO 27001 for information security, that standard has its own, more detailed risk assessment requirements, so treat this as a starting point.

Is there a free risk register template?

Yes, there are free ones online, and some are fine for a quick list. Many, though, are a blank spreadsheet with no scoring guide, no response options and no check that the action worked. This template includes all of those, a worked example and a review log.

Written by Mike Armstrong, senior ISO consultant, former company director, and founder of Plain Standards. In over 30 years running companies at director level, Mike built his own management systems to drive profit long before he adopted ISO 9001, so he comes at this from the owner's side, not the auditor's. Plain Standards helps small and medium sized businesses get ISO certified without a consultant.

  • 5 stars: 2 (100%)
  • 4 stars: 0 (0%)
  • 3 stars: 0 (0%)
  • 2 stars: 0 (0%)
  • 1 star: 0 (0%)
V
Violet Caldwell

Great prodyct

A
Adrian Blackwood

Good, solid templates