Risk Register

Risk Title *

Risk Description *

Threat Category (CRF-TT)

Select one or more threat categories from the CRF Threat Taxonomy

Affected Assets *

Data Classification

Audit / Assessment Source

Risk Owner Name *

Risk Owner Email

Risk Owner Role

Business Unit *

Threat Likelihood *

Threat Likelihood Rationale

Threat Severity Rating *

Threat Severity Rationale

Risk Response Strategy

Risk Status *

Risk Acceptance / Treatment Notes

Date Identified *

Last Review Date *

Next Review Date *

Review Frequency *

Review History Notes

Unauthorized