Free Risk Register Template
Excel, Sheets & PDF
I built this risk register based on how I actually managed risks on real projects in the UAE. Projects worth hundreds of millions of dollars. It has 15 pre-filled example risks across 8 categories, automatic colour-coded scoring, a 5x5 heat map, dropdown validation and residual risk tracking. Download it free in Excel and open it in Google Sheets in one click.
Three sheets: Risk Register (15 pre-filled risks, auto-scoring, dropdowns), Risk Matrix (5x5 heat map with risks plotted), and Instructions (step-by-step guide). Scores calculate automatically. RAG colours update instantly. Fully editable.
Risk score = Probability (1–5) × Impact (1–5) — colour updates automatically
Download Free Template
Excel (.xlsx) · Works in Google Sheets too
- 15 pre-filled risks across 8 categories
- Auto-scoring: Prob × Impact = Score
- RAG colours update automatically
- 5x5 probability-impact heat map
- Dropdown validation on all key fields
- Residual risk tracking (post-response)
- Risk count summary row
- 30 blank rows for your own risks
- Step-by-step instructions sheet
What's Inside — All 15 Columns Explained
Every column in this register has a reason. I did not add anything that does not earn its place on a real project. Here is exactly what each column captures and why it matters.
| Column | What It Captures | Notes |
|---|---|---|
| ID | Unique risk identifier (R-001, R-002…) | Pre-filled. Use it to cross-reference risks in status reports and steering committee packs. |
| Category | Risk type: Scope, Resource, Schedule, Budget, Quality, Technical, Stakeholder, External | Dropdown menu. Select from 10 categories. |
| Risk Description | Clear statement of the risk event and its potential impact | Write as "If [event], then [consequence]." This format forces clarity. |
| Risk Owner | Person accountable for executing the response plan | Do not default every risk to the PM. Ownership must match expertise. |
| Probability (1–5) | Likelihood of the risk occurring | Dropdown: 1=Rare, 2=Unlikely, 3=Possible, 4=Likely, 5=Almost Certain |
| Impact (1–5) | Severity if the risk materialises | Dropdown: 1=Negligible to 5=Catastrophic |
| Risk Score | Probability × Impact — auto-calculated | Colour updates automatically: Green, Yellow, Orange, Red |
| Rating | Low / Medium / High / Critical | Auto-colours based on score threshold |
| Response Strategy | Avoid / Mitigate / Transfer / Accept / Escalate | Dropdown menu |
| Response Action | Specific steps to execute the response | Name who does what and by when. Vague actions get ignored. |
| Contingency Plan | What to do if the risk materialises despite the response | Plan this in advance. Do not improvise under pressure on a live project. |
| Residual Prob | Probability after response actions are in place | Should be lower than original probability if the response is effective. |
| Residual Impact | Impact after response actions are in place | Some risks can only reduce probability, not impact. Know the difference. |
| Residual Score | Residual Prob × Residual Impact — auto-calculated | Shows remaining risk exposure after mitigation. This is your true risk position. |
| Status | Open / In Progress / Closed / Cancelled | Dropdown. Open risks are highlighted in violet so nothing gets missed. |
How Risk Scoring Works in This Template
The risk score calculates automatically as Probability × Impact. Both are rated on a 1 to 5 scale. The score ranges from 1 to 25 and maps to a colour-coded rating that updates the moment you change either input. No formulas to set up. No manual colouring. It is all done for you.
Probability Scale (Column E)
1 — Rare: Less than 10% chance. Theoretically possible but very unlikely. 2 — Unlikely: 10 to 30% chance. Has happened on similar projects but not expected here. 3 — Possible: 30 to 60% chance. Could easily go either way. Flag every Possible risk for active attention. 4 — Likely: 60 to 80% chance. Expected to happen unless you actively manage it. 5 — Almost Certain: More than 80% chance. At this point you are dealing with an issue, not just a risk.
Impact Scale (Column F)
1 — Negligible: Minor disruption, easily absorbed within normal project operations. 2 — Minor: Small schedule or cost impact manageable within existing contingency. 3 — Moderate: Noticeable impact on one or more project constraints. Sponsor needs to be aware. 4 — Major: Significant impact on schedule, budget or scope requiring formal change control. 5 — Catastrophic: Project failure, major financial loss, reputational damage or regulatory breach. On my UAE projects, anything at Impact 5 went straight to the steering committee.
The Five Risk Response Strategies
Choosing the right response strategy is one of the most important decisions a PM makes. I have seen experienced project managers default to Mitigate for every single risk. That is lazy risk management. Here is when to use each strategy properly.