Your risk register is a list of things that already happened

Most risk registers are written backwards (from incidents, not exposures), which is why the entry that matters is usually the one nobody has thought to add.

By Steve 5 min read
Abstract bridge artwork for Your risk register is a list of things that already happened

Look at almost any risk register in a small or mid-sized business and you can reconstruct its history from the entries. The data breach scare of two years ago. The supplier who went into administration. The invoicing month that went wrong. The near-miss on site. Each one has an owner, a mitigation, a status of green or amber, and a review date. What that document describes is not the risk facing the business. It describes the risks the business has already survived, and therefore the ones it has already, in…

Keep reading for free

Create an account to read the rest.

The whole library is free. No card, no subscription, no trial that quietly ends. An account simply lets us know who we are writing for, and opens every article from here on.

  • Every article, in full, at no cost
  • New articles published every weekday
  • Takes about twenty seconds
Create a free account I already have one

Free means free. We will not charge you for the library, and you can read as much of it as you like.

Important: General information only. Rialto Bridge articles describe patterns and considerations that may apply to a business; they are not financial, legal, tax or accounting advice, and they take no account of your particular circumstances. Consider your own situation and seek advice from a qualified professional before acting.

More on Leadership

Scroll to Top