A risk register provides a record of identified risks relating to the project, including their status and history. It is used to capture and maintain information on all the identified threats and opportunities relating to the project.

The following quality criteria apply to the risk register:

• The status indicates whether action has been taken.
• Risks are uniquely identified, including information about which product they refer to.
• Access to the risk register is controlled.
• The risk register is kept in a safe place.